RE: shortcuts in the desktop
Hi,
Thanks for posting here.
To Vera Noest, many thanks for your input.
From your reply, I understand you want to restrict terminal users from
saving anything except shortcut. Based on my experience, we can apply Local
Mandatory User Profiles to prevent users from modifying desktop. Most
companies can benefit from a standardized user environment.
However, as Vera Noest said, it couldn't tell the targeted file is normal
file or shortcut. In fact, it will prevent users from modifying everything,
such as desktop, favorites, my documents and so on. So before you start
implementing it, please check if this method meets your demand. Here, I
also list little Background information about Mandatory User Profiles for
your reference:
Background of Mandatory User Profiles:
=============================
The mandatory user profile is a preconfigured user profile that you assign
to users. Additionally, you can assign one mandatory profile to all users
who require identical configurations. This allows you to uniform end-users'
environments for all those users by applying only one profile.
About how to create Mandatory User Profile, please see the following:
================================================
1)Go to Administrative Tools/Computer Management to Expand the Local User
and Groups folder.
2) Expand the Users folder and right click on the Users folder to select
New User.
3) Create a user, for example named Defuser. Logoff the Administrator
account and login to the new defuser account. You can customize desktop and
other setting, such as Favorites file, My documents and so on. After
completion, please log back in to the Administrator account.
4) Navigate to the X:\WINDOWS\All Users\Defuser folder. Right click on the
ntuser.dat file and select rename from the menu. Rename the file to
ntuser.man
5) Go back to Administrative Tools/Computer Management/Expand the Local
User and Groups folder. Double click on the user that you want to restrict
from modifying desktop. Go to the profiles tab. In the Profile Path section
type in X:\WINDOWS\All Users\Defuser (where X is the system drive letter.
Usually C:\). Click OK and then close Computer Management.
6) To do so, when users logging off Terminal server, their customization
will not be saved
Alternatively, you can use Group Policy to replace step 4 to apply
Mandatory User Profiles for Terminal server as following:
Input Gpedit.msc in RUN dialogue and enable "Prevent Roaming Profile
changes from propagating to the server" in Computer
Configuration-->Administrative Templates-->System-->User profiles.
More information:
==============
Using User Profiles in Windows Server 2003
http://technet2.microsoft.com/windowsserver/en/library/23ee2a30-5883-4ffa-b4
cf-4cfff3ff8cb71033.mspx
Create a mandatory user profile
http://technet2.microsoft.com/windowsserver/en/library/3bd7900c-6145-461d-89
f2-c12a8c6dd7301033.mspx?mfr=true
I hope this helps. Have a good day!
Sincerely
Morgan Che
Microsoft Online Support
Microsoft Global Technical Support Center
Get Secure! -
www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
--->From: "Simon" <simonh@newsgroup.nospam>
--->Subject: shortcuts in the desktop
--->Date: Wed, 7 May 2008 10:17:40 -0400
--->Lines: 8
--->Message-ID: <624A85CD-C8A2-453A-B945-CFDE67BCCB9F@microsoft.com>
--->MIME-Version: 1.0
--->Content-Type: text/plain;
---> format=flowed;
---> charset="iso-8859-1";
---> reply-type=original
--->Content-Transfer-Encoding: 7bit
--->X-Priority: 3
--->X-MSMail-Priority: Normal
--->X-Newsreader: Microsoft Windows Mail 6.0.6000.16480
--->X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6000.16545
--->X-MS-CommunityGroup-MessageCategory:
{E4FCE0A9-75B4-4168-BFF9-16C22D8747EC}
--->X-MS-CommunityGroup-PostID: {624A85CD-C8A2-453A-B945-CFDE67BCCB9F}
--->Newsgroups: microsoft.public.windows.terminal_services
--->Path: TK2MSFTNGHUB02.phx.gbl
--->Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.terminal_services:17503
--->NNTP-Posting-Host: TK2MSFTNGHUB02.phx.gbl 127.0.0.1
--->X-Tomcat-NG: microsoft.public.windows.terminal_services
--->
--->Hello, is there a way I can restrict TS users from saving anything in
the
--->desktop except shortcuts?
--->I'm running win 2003 server.
--->
--->Thanks
--->
--->Simon
--->
--->