make desktop read only...good policy?

[anthonyx26]

Is there a way to make the user's desktop read-only upon login?

Is this even a good idea? I just hate when users start saving all their
docs to the desktop...so I figure if they can't save to the desktop this
will force them save to their my docs or public folder.

- anthonyx26

 

[Vera Noest [MVP]]

Re: make desktop read only...good policy?

Sure. You can use a Group Policy and redirect the desktop for all
users to a custom desktop folder, which you can make read-only.

User Configuration - Windows Settings - Folder Redirection
Desktop
My Documents
Start Menu

And because this is a User setting, you will also need this
setting:

Computer Configuration - Administrative Templates - System - Group
Policy
"User Group Policy loopback processing mode" - "Replace"

and then apply the GPO to the OU which contains the Terminal
Server.
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

"anthonyx26" <anthonyx26@gmail.com> wrote on 26 okt 2008 in
microsoft.public.windows.terminal_services:

> Is there a way to make the user's desktop read-only upon login?
>
> Is this even a good idea? I just hate when users start saving
> all their docs to the desktop...so I figure if they can't save
> to the desktop this will force them save to their my docs or
> public folder.
>
> - anthonyx26

 

[DGH]

Re: make desktop read only...good policy?

To truly make EVERY part of the PC read-only you could use a product like
Microsoft Steady State.
This is a free download from microsoft.com that allows the user to make any
changes they'd like while they are using the PC, but when the PC is rebooted
it reverts back to the original configuration.
I've used it in school settings, and other situations where you don't want
to allow users to save ANY changes to the machine. It certainly has some
significant downside in some environments, but in appropriate situations
it's a really great tool.

--David


"Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote in message
news:Xns9B43F0EA07861veranoesthemutforsse@207.46.248.16...
> Sure. You can use a Group Policy and redirect the desktop for all
> users to a custom desktop folder, which you can make read-only.
>
> User Configuration - Windows Settings - Folder Redirection
> Desktop
> My Documents
> Start Menu
>
> And because this is a User setting, you will also need this
> setting:
>
> Computer Configuration - Administrative Templates - System - Group
> Policy
> "User Group Policy loopback processing mode" - "Replace"
>
> and then apply the GPO to the OU which contains the Terminal
> Server.
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
> "anthonyx26" <anthonyx26@gmail.com> wrote on 26 okt 2008 in
> microsoft.public.windows.terminal_services:
>
>> Is there a way to make the user's desktop read-only upon login?
>>
>> Is this even a good idea? I just hate when users start saving
>> all their docs to the desktop...so I figure if they can't save
>> to the desktop this will force them save to their my docs or
>> public folder.
>>
>> - anthonyx26