Hamins Posted August 27, 2008 Share Posted August 27, 2008 (edited) Hi,We have a network of around 75 workstations & 1 Windows 2003 Ent. server as a DC. We have not setup roaming profiles for the users. We would like to prevent users from saving any kind of file/data onto the desktop. The user should be able to save files only on the shares on the server. I have already restricted access to the local drives using GPOs. Now, I would like to know how to prevent users from saving data on their desktops. I know that one method is by using FOLDER RE-DIRECTION. However, I'm not to keen on using this method, since I feel it would increase the load on the server, as all the users will accessing their respective desktops from the sever.Is there any other effective way to preventing users from saving files on the desktop (from any application, or even the desktop context menu) ?? Edited August 27, 2008 by Hamins Link to comment Share on other sites More sharing options...
mara- Posted August 27, 2008 Share Posted August 27, 2008 Maybe you could open Group Policy (gpedit.exe) and navigate to User Configuration->Administrative Templates->Desktop->Active Desktop. You have various options there for changes that can be done on Desktop.Cheers Link to comment Share on other sites More sharing options...
Hamins Posted August 27, 2008 Author Share Posted August 27, 2008 Hi Mara, thanks for the response.I tried that. It prevents changes to the stuff like the desktop wallpaper, active content etc. However, it does not prevent the user from save files onto the desktop (either from the Save/Save as option of an applications, or from the desktop context menu : Right-Click - New) Link to comment Share on other sites More sharing options...
Hamins Posted August 28, 2008 Author Share Posted August 28, 2008 Does anyone have any further suggestions ? Link to comment Share on other sites More sharing options...
Idontwantspam Posted August 28, 2008 Share Posted August 28, 2008 You could write a script to deny them write access to %userprofile%\desktop. Something like @echo offcacls "%userprofile%\desktop" /E /C /P "%username%":RexitAdd that to everyone's startup scripts, and voila, they can't write to the desktop. * I don't know if I got the syntax 100% correct for cacls. You might want to check that I did it right. Link to comment Share on other sites More sharing options...
Hamins Posted August 28, 2008 Author Share Posted August 28, 2008 Hi Idontwantspam,Thanks for the response/suggestion.Is calcs a default Windows XP command ? If not, where can I get it from ? Once I download it, it'll have to be distributed to all the local XP clients, right ? Link to comment Share on other sites More sharing options...
cluberti Posted August 28, 2008 Share Posted August 28, 2008 Cacls.exe is a default XP binary. Link to comment Share on other sites More sharing options...
Hamins Posted August 29, 2008 Author Share Posted August 29, 2008 Hi Idontwantspam/Cluberti,Thanks for the help guyz... I tried the script by Idontwant...., and it seems to be working on the test Windows XP machine... Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now