Lock Desktop Group Policy Windows 7 From Server 2012 Standard

[cheekycharly]

Hi does anyone know of a policy to lock the desktop down i.e. stop pupils in an ou from saving to the desktop and also stop them from renaming desktop icons or sending them to deleted items.

 

Thanks in advance.

[Michael]

The desktop will (or should normally), be a redirected folder/share somewhere on your server. If you look at Group Policies you'll know for sure (Folder Redirection > Desktop).

 

Simply give Pupils read only access to the share, just as you would other folders on your network. Pupils will then be unable to save or rename shortcuts. They'll just see an Access Denied message.

[cheekycharly]

Yes I see the folder... D:\data\profiles\Desktop\Pupil or \\server001\profiles\Desktop\Pupil

 

Permissions on the folder currently are...

 

Everyone: Full Control

CREATOR OWNER: Special Permissions

SYSTEM: Full Control

Administrators: Full Control (BPRU\Administrators) Full Control

Edited February 13, 2017 by cheekycharly

[Michael]

Remove Everyone: Full Control, then type/search: Authenticated Users, and specify Read/execute rights.

 

Then click Advanced > Change Permissions > Replace all child objects...

[cheekycharly]

Thanks very much Michael I will do this at 3.30pm