Access denied to re-directed desktop

[Ambient]

Hi all

 

A school i look after has a simple AD/GPO design whereby students are directed to a specific folder for their desktop and then a different folder for their start menu. No problems there, yet.

 

It has become apparent that students have write access to the desktop, which in turn presents their saved work to every other student (on their desktop)

 

I've unticked the ACL to allow students to write to the redirected desktop folder, but the result of this is that an error message appears when the students logon stating that access is denied to the folder, resulting in none of the shortcuts appearing.

 

I've checked the rest of the ACL's and nothing looks to conflict. The pupils group definitely has read and list folder contents rights.

 

Any ideas?

[Ambient]

oh wait, i think i've sorted it

[cooka]

If you don't want students to be able to save to the folder, make sure they only have read access for students.

 

How did you fix out of curiosity?

[MattElms]

I would also be interested to know how you fixed this if possible?