shortcuts in the desktop

[Guest Simon]

Hello, is there a way I can restrict TS users from saving anything in the

desktop except shortcuts?

I'm running win 2003 server.

 

Thanks

 

Simon

[Guest Vera Noest [MVP]]

Re: shortcuts in the desktop

 

You can configure a custom desktop in a Group Policy using folder

redirection, and make it read-only. But you can not make a difference

between shortcuts and real files.

 

User Configuration - Windows Settings - Folder Redirection

Desktop

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

"Simon" <simonh@newsgroup.nospam> wrote on 07 maj 2008 in

microsoft.public.windows.terminal_services:

> Hello, is there a way I can restrict TS users from saving

> anything in the desktop except shortcuts?

> I'm running win 2003 server.

>

> Thanks

>

> Simon

[Guest Morgan che]

RE: shortcuts in the desktop

 

Hi,

 

Thanks for posting here.

 

To Vera Noest, many thanks for your input.

 

From your reply, I understand you want to restrict terminal users from

saving anything except shortcut. Based on my experience, we can apply Local

Mandatory User Profiles to prevent users from modifying desktop. Most

companies can benefit from a standardized user environment.

 

However, as Vera Noest said, it couldn't tell the targeted file is normal

file or shortcut. In fact, it will prevent users from modifying everything,

such as desktop, favorites, my documents and so on. So before you start

implementing it, please check if this method meets your demand. Here, I

also list little Background information about Mandatory User Profiles for

your reference:

 

Background of Mandatory User Profiles:

=============================

The mandatory user profile is a preconfigured user profile that you assign

to users. Additionally, you can assign one mandatory profile to all users

who require identical configurations. This allows you to uniform end-users'

environments for all those users by applying only one profile.

 

About how to create Mandatory User Profile, please see the following:

================================================

 

1)Go to Administrative Tools/Computer Management to Expand the Local User

and Groups folder.

 

2) Expand the Users folder and right click on the Users folder to select

New User.

 

3) Create a user, for example named Defuser. Logoff the Administrator

account and login to the new defuser account. You can customize desktop and

other setting, such as Favorites file, My documents and so on. After

completion, please log back in to the Administrator account.

 

4) Navigate to the X:\WINDOWS\All Users\Defuser folder. Right click on the

ntuser.dat file and select rename from the menu. Rename the file to

ntuser.man

 

5) Go back to Administrative Tools/Computer Management/Expand the Local

User and Groups folder. Double click on the user that you want to restrict

from modifying desktop. Go to the profiles tab. In the Profile Path section

type in X:\WINDOWS\All Users\Defuser (where X is the system drive letter.

Usually C:\). Click OK and then close Computer Management.

 

6) To do so, when users logging off Terminal server, their customization

will not be saved

 

Alternatively, you can use Group Policy to replace step 4 to apply

Mandatory User Profiles for Terminal server as following:

 

Input Gpedit.msc in RUN dialogue and enable "Prevent Roaming Profile

changes from propagating to the server" in Computer

Configuration-->Administrative Templates-->System-->User profiles.

 

More information:

==============

 

Using User Profiles in Windows Server 2003

http://technet2.microsoft.com/windowsserver/en/library/23ee2a30-5883-4ffa-b4

cf-4cfff3ff8cb71033.mspx

 

Create a mandatory user profile

http://technet2.microsoft.com/windowsserver/en/library/3bd7900c-6145-461d-89

f2-c12a8c6dd7301033.mspx?mfr=true

 

I hope this helps. Have a good day!

 

 

Sincerely

Morgan Che

Microsoft Online Support

Microsoft Global Technical Support Center

 

Get Secure! - http://www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so

that others may learn and benefit from your issue.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

 

 

--------------------

--->From: "Simon" <simonh@newsgroup.nospam>

--->Subject: shortcuts in the desktop

--->Date: Wed, 7 May 2008 10:17:40 -0400

--->Lines: 8

--->Message-ID: <624A85CD-C8A2-453A-B945-CFDE67BCCB9F@microsoft.com>

--->MIME-Version: 1.0

--->Content-Type: text/plain;

---> format=flowed;

---> charset="iso-8859-1";

---> reply-type=original

--->Content-Transfer-Encoding: 7bit

--->X-Priority: 3

--->X-MSMail-Priority: Normal

--->X-Newsreader: Microsoft Windows Mail 6.0.6000.16480

--->X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6000.16545

--->X-MS-CommunityGroup-MessageCategory:

{E4FCE0A9-75B4-4168-BFF9-16C22D8747EC}

--->X-MS-CommunityGroup-PostID: {624A85CD-C8A2-453A-B945-CFDE67BCCB9F}

--->Newsgroups: microsoft.public.windows.terminal_services

--->Path: TK2MSFTNGHUB02.phx.gbl

--->Xref: TK2MSFTNGHUB02.phx.gbl

microsoft.public.windows.terminal_services:17503

--->NNTP-Posting-Host: TK2MSFTNGHUB02.phx.gbl 127.0.0.1

--->X-Tomcat-NG: microsoft.public.windows.terminal_services

--->

--->Hello, is there a way I can restrict TS users from saving anything in

the

--->desktop except shortcuts?

--->I'm running win 2003 server.

--->

--->Thanks

--->

--->Simon

--->

--->

[Guest Morgan che]

RE: shortcuts in the desktop

 

 

Hi,

 

How are you?

 

I am writing to see if you have any update about this post. If you

encounter any break/fix issue, please feel free to let me know.

 

Have a good day!

Sincerely

Morgan Che

Microsoft Online Support

Microsoft Global Technical Support Center

 

Get Secure! - http://www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so

that others may learn and benefit from your issue.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

 

 

--------------------

--->From: "Simon" <simonh@newsgroup.nospam>

--->Subject: shortcuts in the desktop

--->Date: Wed, 7 May 2008 10:17:40 -0400

--->Lines: 8

--->Message-ID: <624A85CD-C8A2-453A-B945-CFDE67BCCB9F@microsoft.com>

--->MIME-Version: 1.0

--->Content-Type: text/plain;

---> format=flowed;

---> charset="iso-8859-1";

---> reply-type=original

--->Content-Transfer-Encoding: 7bit

--->X-Priority: 3

--->X-MSMail-Priority: Normal

--->X-Newsreader: Microsoft Windows Mail 6.0.6000.16480

--->X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6000.16545

--->X-MS-CommunityGroup-MessageCategory:

{E4FCE0A9-75B4-4168-BFF9-16C22D8747EC}

--->X-MS-CommunityGroup-PostID: {624A85CD-C8A2-453A-B945-CFDE67BCCB9F}

--->Newsgroups: microsoft.public.windows.terminal_services

--->Path: TK2MSFTNGHUB02.phx.gbl

--->Xref: TK2MSFTNGHUB02.phx.gbl

microsoft.public.windows.terminal_services:17503

--->NNTP-Posting-Host: TK2MSFTNGHUB02.phx.gbl 127.0.0.1

--->X-Tomcat-NG: microsoft.public.windows.terminal_services

--->

--->Hello, is there a way I can restrict TS users from saving anything in

the

--->desktop except shortcuts?

--->I'm running win 2003 server.

--->

--->Thanks

--->

--->Simon

--->

--->