How do you do....it? Thread, Preventing saving to desktop on roaming profiles in Technical; I'm trying to implement desktop restrictions on staff roaming profiles but encountering a couple of issues.
I've used XCACLS on ...
12th January 2011, 11:04 AM #1
Preventing saving to desktop on roaming profiles
I'm trying to implement desktop restrictions on staff roaming profiles but encountering a couple of issues.
I've used XCACLS on the desktop folder in their server copy of the profile to prevent them from writing:
and in Group Policy Admin Templates - Desktop I've enabled "Don't save settings at exit"
%LOGONSERVER%\Netlogon\xcacls "%USERPROFILE%\Desktop" /P "%USERDOMAIN%\%USERNAME%":RX Administrators:F System:F /Y
But the problem is that when they're logged on they can still save stuff onto the desktop. Its only when they log off they get an error that the files cannot be written to the server location.
Plus, when they log back onto the same machine the files are there because of the locally cached copy of the profile.
Can anyone advise what other option I'm missing out? ISTR years ago when I first implemented this I could get an "Access denied" error whenever you tried to put something on the desktop.
IDG Tech News
12th January 2011, 11:07 AM #2
possibly easiest way is to redirect the desktop to a network location they only have read access to
12th January 2011, 11:16 AM #3
I'll second that, much easier way than setting permissions on a roaming desktop
12th January 2011, 12:01 PM #4
Cheers guys I'll have a read at this thread, seems like a good idea.
12th January 2011, 12:09 PM #5
I think the way to do it would be to leave the server permissions fine and then setup a gpo which gives read only access to C:\docs&settings\%username%\Desktop
then just ensure there is nothing on there desktop on the server. although you can't then deploy any shortcuts to the user profile
By theeldergeek in forum Mac
Last Post: 18th May 2010, 01:23 PM
By Tegwin in forum Windows
Last Post: 8th March 2010, 12:59 PM
By richard_s in forum How do you do....it?
Last Post: 31st July 2009, 09:19 PM
By Shocker in forum Network and Classroom Management
Last Post: 30th March 2009, 06:13 PM
By robbied69 in forum Windows
Last Post: 25th September 2006, 06:13 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)