Students accessing appdata folder

[arqcan]

Hi all,

 

I'm new working in a school environment and we have loads of students who are accessing there appdata folders and leaving flash games there. Any suggestions on how we can lock this down? its causing us to back up loads of extra information and we are at a bit of a loss on how to restrict the access. Any suggestions would be appreciated.

 

Thanks

[Bobby_Moore]

What kind of network are you running? You could:

 

1) create an additional profile share separate to the user share. Use GPO to redirect to their profile

 

2) revert Appdata to the local machine and block C: drive access. What is so important in appdata that you need it to migrate from machine to machine?

 

Bobby

[ozydave]

We had probs with roaming profiles corrupting all the time. Lots if laptops which get switches off during the log off corrupting the profiles and allowing access to app data which then got copied back.

Have now removed the profiles paths from AD, folder redirection of everything including appdata. Slightly longer login, but a whole lot less than a broken when the profile.

AppLocker blocking everything now including any exe being saved to c:\users

Made a big difference to the number if problems login issues

[arqcan]

Thanks for that, we need the user to be able to access the roaming profile because of one of the programs that gets used on the student laptops [siemens NX], we will have a look at the applocker and see if that will fit the bill.