Moving to OneDrive and desktop redirection

[ITGuyNW]

Hi all

 

I might be thinking a bit old fashioned here, but I am wanting to move users to OneDrive, while maintaining a locked down desktop. Is this still the way to go?

 

With the OneDrive migration, I can break folder redirection, move things over with KFM etc however users can modify their desktop even with GPO rules in place. 

 

Do you still lock down your desktop so it can't be messed with? or do people let staff do what they want? I am wanting to keep things uniform.

[foofighterjim]

As far as OneDrive is concerned, the desktop is just another folder, just like Documents and Pictures; it is covered by KFM, files on demand and will be backed up with your OneDrive backup. I've not seen the need to prevent this since moving to OneDrive storage.

[DavR]

4 hours ago, ITGuyNW said:

I might be thinking a bit old fashioned here, but I am wanting to move users to OneDrive, while maintaining a locked down desktop. Is this still the way to go?

 

We're using OneDrive with KFM, but we still lock down desktops. We're doing this by setting redirected desktops to a server share, with read only access.

 

AFAIK, OneDrive just continues to sync the empty Desktop folder from the user profile, although I must admit I've not looked into it. 

[ITGuyNW]

My concern is staff take laptops home. With offline files being disabled, any network share desktop will now fail to cache once they break line of site of the network, so I'm looking at either hosting the desktop locally or onedrive, but these options seem to open up the desktop. I tried public desktop instead of the users desktop however this broke things.

[itskdog]

Are you able to keep Offline Files enabled for that share, but not the home folder?

[DavR]

Fair point, the devices we enforce redirected desktops on here don't go offsite. 

 

On the devices we have which do go offsite and still use OneDrive, we abandoned Desktop folder lockdown. Since it's no longer part of a standard roaming profile, there's no real performance hit, so if they want to leave junk all over their desktop, that's up to them I guess.