Prevent Local Saving

[Gongalong]

Hi folks,

 

As part of a DPA review we're looking at disabling local hard disk saving on our fleet of laptops and desktops (these are on a 2008 R2 domain).

 

There's an option in GP to disable access to the C drive, but this doesn't stop applications from saving to places like the desktop.

 

Is there a way with GP to disable all local saving, or some other way of achieving this if GP can't?

 

TIA

[glen_j]

redirect their document folders and desktop to their directory on the server, make sure they're not a memeber of local admins and they shouldn't be able to save anywhere else. folder redirection is done within group policy.

[Gongalong]

I might be wrong, but they still seem to be able to. We have redirection in place, but perhaps not for the desktop, and when they're away from the network and login it then saves to their local desktop/documents folder.