LOcking down the desktop

[Brono]

hi all

 

we have a windows 2003 server and a mix of windows 2000 and xp workstatins and ranger desktop security, we have restricted the student desktops using the ranger admin manager and GPO's but the students can still drag and drop onto the desktop, we have also set file / sharing permissions on the server folders to read only for students and removed inherant permissions but still they drag and drop

 

all idea's welcome to how we can stop this

 

thanks for any help

 

Paul

[tmcd35]

We use GPO's to redirect the desktop to a shared folder on the server which the students have read only access to. Works a treat.

[Danlewis3]

Set the GPO to disable the desktop. Easiest solution.

[Brono]

hi Dan

 

I did suggest loosing the desktop icon but the teachers "like them" !!!!

 

Paul

[Stuart_C]

Enable active desktop, then restrict changed to that desktop.

[featured_spectre]

it doesnt matter what the teachers want, its about the integrity of the network. Get permission from your boss / head teacher and you are set.