make desktop read only...good policy?

[Guest anthonyx26]

Is there a way to make the user's desktop read-only upon login?

 

Is this even a good idea? I just hate when users start saving all their

docs to the desktop...so I figure if they can't save to the desktop this

will force them save to their my docs or public folder.

 

- anthonyx26

[Guest Vera Noest [MVP]]

Re: make desktop read only...good policy?

 

Sure. You can use a Group Policy and redirect the desktop for all

users to a custom desktop folder, which you can make read-only.

 

User Configuration - Windows Settings - Folder Redirection

Desktop

My Documents

Start Menu

 

And because this is a User setting, you will also need this

setting:

 

Computer Configuration - Administrative Templates - System - Group

Policy

"User Group Policy loopback processing mode" - "Replace"

 

and then apply the GPO to the OU which contains the Terminal

Server.

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

"anthonyx26" <anthonyx26@gmail.com> wrote on 26 okt 2008 in

microsoft.public.windows.terminal_services:

> Is there a way to make the user's desktop read-only upon login?

>

> Is this even a good idea? I just hate when users start saving

> all their docs to the desktop...so I figure if they can't save

> to the desktop this will force them save to their my docs or

> public folder.

>

> - anthonyx26

[Guest DGH]

Re: make desktop read only...good policy?

 

To truly make EVERY part of the PC read-only you could use a product like

Microsoft Steady State.

This is a free download from microsoft.com that allows the user to make any

changes they'd like while they are using the PC, but when the PC is rebooted

it reverts back to the original configuration.

I've used it in school settings, and other situations where you don't want

to allow users to save ANY changes to the machine. It certainly has some

significant downside in some environments, but in appropriate situations

it's a really great tool.

 

--David

 

 

"Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote in message

news:Xns9B43F0EA07861veranoesthemutforsse@207.46.248.16...

> Sure. You can use a Group Policy and redirect the desktop for all

> users to a custom desktop folder, which you can make read-only.

>

> User Configuration - Windows Settings - Folder Redirection

> Desktop

> My Documents

> Start Menu

>

> And because this is a User setting, you will also need this

> setting:

>

> Computer Configuration - Administrative Templates - System - Group

> Policy

> "User Group Policy loopback processing mode" - "Replace"

>

> and then apply the GPO to the OU which contains the Terminal

> Server.

> _________________________________________________________

> Vera Noest

> MCSE, CCEA, Microsoft MVP - Terminal Server

> TS troubleshooting: http://ts.veranoest.net

> ___ please respond in newsgroup, NOT by private email ___

>

> "anthonyx26" <anthonyx26@gmail.com> wrote on 26 okt 2008 in

> microsoft.public.windows.terminal_services:

>

>> Is there a way to make the user's desktop read-only upon login?

>>

>> Is this even a good idea? I just hate when users start saving

>> all their docs to the desktop...so I figure if they can't save

>> to the desktop this will force them save to their my docs or

>> public folder.

>>

>> - anthonyx26