Stop Local User Saving To Desktop

[tl82]

We have a couple of laptops in school that staff take home and use a local (non-admin) login to access the pc when at home. Is there a way to prevent them from saving documents, etc onto the desktop? I want to stop them from saving all their stuff there and instead use their cloud storage or pen drives to save their stuff. I've looked around and the only way to do this is when they are connected to the domain, but as they are using the laptops at home, this way won't work.

 

Does anyone have any ideas?

[dapaulio]

cant test at the moment but what if you Restrict access to the C:\ using gpedit.msc. This will like affect cloud storage if cached onto the c:\ eg one drive, but nothing stopping them from uploading/editing thru o365 online

[LeMarchand]

If it's only a couple, could you log on to the machines and take ownership of the desktop folder and set it to read only for the staff member?

 

We don't use local sign ons for laptops - just get 'em to use their cached credentials. Makes life easier.

[Davit2005]

What about Re-Direct the desktop folder and make it read only, i.e. shared between groups of users i.e. students.

 

This has the added benefit of being able to push hyperlinks out to the desktop quickly.

Edited January 31, 2018 by Davit2005

[3s-gtech]

How about a logon script which uses subst to redirect it? Would need a bit of testing, but fairly straightforward in theory and can be done with gpedit.msc.

[ADMaster]

+1 to remove local accounts and use cached credentials.

[tl82]

Thanks for the advice everyone. Ended up doing a couple of group policy edits and making folders read only/no access or re-directing them.