Stop files being saved to the desktop

  • Thread starter Thread starter jas0n
  • Start date Start date
J

jas0n

Is it possible to stop files being saved to the w2k desktop?

Ive been having a play with mandatory profiles which work fine but I
dont like the idea of a user being able to create/save the file to the
desktop and then log off, reboot, shut down or have a computer crash at
which point the file would be gone - thats potentially several hours
lost work per incident.

I tested to see if ntfs settings would be possible to make the desktop
read/execute/list only but the settings dont stick. Tested whilst an
ordinary profile, then renamed to .man but no go.

So, is it possible via either group policy or another method.
 
You could always go in under Computer Configuration> Windows Settings>
Security Settings> File System... browse to a profile\desktop, and apply
List, Read, Execute permissions to it for anything less than Administrators
(and SYSTEM) (which hopefully your users are not local admins), leaving
Administrators and SYSTEM with Full Control).

HTH

Ken
 
You could always go in under Computer Configuration> Windows Settings>
Security Settings> File System... browse to a profile\desktop, and apply
List, Read, Execute permissions to it for anything less than Administrators
(and SYSTEM) (which hopefully your users are not local admins), leaving
Administrators and SYSTEM with Full Control).

HTH

Ken
Click to expand...

hadnt thought of using group policy for the ntfs permissions ....
applying the ntfs permissions manually had no effect - i'll test that
tomorrow.

and no, the users are not administrators
 
Do let us know what happens with this. I'm kind of surprised that manually
editing the permissions to not include Modify and Write for the user didn't
keep them from saving things to the desktop.

Ken
 
Back
Top