Public User in Windows 7

[jduawa]

Hello. I have read several threads on the public user libraries and how to remove them from the logged in users library location and I have that working with shlib.exe in the login script. What I am struggling with is how do i prevent students and staff from writing to c:\user\public\documents and the other common folders (pictures,videos,downloads,music) without breaking windows. our students use mandatory profiles but the staff use roaming profiles. Currently we are on server 2003 AD but will move to 2012 in the next few weeks. I need to get windows 7 rolled out and this is holding up my image if i need to modify permissions on those folders.

Thanks