Restrict Access to Desktop, My Documents, Download, My music, in GPO 2008r2

[cornewool]

Hello,

I want to restrict users permission to save files on their desktop and also restrict access to My Documents, Download Folders......

 

Thank you

[NB9457]

is it to stop them saving locally or something? If that is the reason, use redirected folders.

[cornewool]

yes, to stop them from saving on desktop and also downloading to my download folder and saving to my document. I only want them to save their files on the shared home drive.

[NB9457]

yes, to stop them from saving on desktop and also downloading to my download folder and saving to my document. I only want them to save their files on the shared home drive.

 

You should be able to achieve this with redirected folders!

 

Plus if you set the desktop to the same folder with shortcuts for everyone, they'd all have the same desktop, then don't grant them exclusive rights to it and set the folder permission to read only.

[ITGURU]

All our students' desktop folders are redirected to a single folder , with read only permissions with shortcuts in so they cannot save to the desktop.

[cornewool]

Thanks buddy, can you help me with how to redirect the desktop folder, and is that going to take care of my documents and download folder as well ......?

 

Thank you

[NB9457]

Thanks buddy, can you help me with how to redirect the desktop folder, and is that going to take care of my documents and download folder as well ......?

 

Thank you

 

Are you familiar with group policy?

[cornewool]

yes but not a pro, but can configure most of the policies ........?

[NB9457]

Off the top of my head:

 

Open or create the GPO and link it accordingly, then I think the path is:

User config - Win settings - folder redirection

 

For desktop, create a share on the server named "StudenDesktops" then set permission for Students to read only and whack all your links in there, then open the above path on Group Policy Management, enter the folder location for desktop and that's that.

 

Then for the others, you can just choose to link it to the users folder.

[cornewool]

Thanks buddy..... But one more thing I would like to find out from you....

 

We have 2 subnets, one is LAN (Wired) with a different IP subnet, 192.168.200.0\24 and Wireless network also on a different subnet 172.17.0.0\16. I want to be able to join computers from the wireless network to the domain. I want users connected through the wireless should also be able to connect to the Domain. How do I achieve this............. Hope you understand my point.......

 

Thank you

[cornewool]

Also, is it advisable to create the roaming profile folder on a network storage drive or a shared drive on the physical server...... The reason is, I tried creating all the shared drives in including the shared profile folder on the network storage drive but seems to fail to load the profiles..... Is there a way I can resolve this issue or I should just create it on the server shared drive......?

[NB9457]

Also, is it advisable to create the roaming profile folder on a network storage drive or a shared drive on the physical server...... The reason is, I tried creating all the shared drives in including the shared profile folder on the network storage drive but seems to fail to load the profiles..... Is there a way I can resolve this issue or I should just create it on the server shared drive......?

 

Did you have roaming profiles set up already? If not, they can cause some problems.

 

And for the different subnet, add another scope on DHCP maybe?

[cornewool]

Yes I have roaming profile set up already and running .....

 

I don't understand adding scope on DHCP what you mean by that....?

 

I am getting my IP's from cyberoam, and the Wireless network is a DHCP network only the wired LAN is static....... I just want the users connected to the wireless to be able to logon to the AD