grp policy RESTRICT saving to local disk

[MIKEY LABS]

I have w2k3 r2 and windows xp sp 2 in a domain envi.
I want to set a policy to restrict users to save to the local hard disk
unless they are admins. How would i go about setting that up in group policy
mgmt console?

thanks in advance

 

[Steve Riley [MSFT]]

There's no way to do that, the operating system can't function in this way.
Any attempt to create access control lists to enforce this will probably
result in application failure, and there's no way we can predict how Windows
itself would behave.

Thin clients based on Terminal Server might work for you.

 

[MIKEY LABS]

What about only saving to the my documents or to the profile folders only? is
that possible?
then i can do offline syncs or backup that folder?

 

[Steve Riley [MSFT]]

What is that you're trying to prevent? If users aren't local admins, then
the default permissions are fine. There's no need to tinker with them.
Standard users can't overwrite operating system files or files other than
their own.

--
Steve Riley
(e-mail address removed)
http://blogs.technet.com/steriley
http://www.protectyourwindowsnetwork.com