Cruzjr

GOAL: Users on Win10 ENTERPRISE systems can ONLY write to 5 folders in their userprofile: Documents, Desktop, Downloads, Favorites and Pictures. I have removed from File Explorer 3D Objects, Music and Videos from being displayed via registry. With a GPO, we want to limit users rights to write/create/modify ANYWHERE outside those 5 folders. System, Applications, Creator Owner and Administrators still have FULL CONTROL. We will then proceed to do (ata later date) redirect/sync those folders to OneDrive.

We are locking down the C: drive in Win10 1809 ENT. We allow FULL CONTROL to %userprofile%\Documents, Downloads, Desktop, Picture and Favorites. However GPMC directs to the following path: C:\windows\system32\config\systemprofile. How can we edit the paths to point to %userprofile%\Desktop instead in GPMC ? Screenshot attached.