The policy is applied to the user account. I have already run gpupdate /force. I want the policy to applied to specific users. I'll apply it to the computer account and keep you posted.
Main Topics
Browse All TopicsWe have a series of computers accessed by the public in mulitple locations. To decrease bandwidth, we would like the users to save files to My Document without having any other access to the system drive.
They are unable to save files at the root of C unless they create a folder. Users can't create folders under Documents and Settings. Applications default to the My Documents folder. A, B, C, and D drives are hidden (policy enabled). Access to C: is allowed as preventing access will not allow My Documents to display in the Save As field. I have applied the following files to the File System policy in AD Group Policy
http://tekjournal.wordpres
The only difference I have made to what this article suggests is removing the creator/owner to prevent users creating files at the root of C: .
The file system policy will not apply. It is set with the other restriction policies in the same GPO. The GPO is in a separate OU. No other policies are applying to that user or computer. Additionally, running Group Policy Results shows all policies are enabled for that GPO except for the file system policy. There are no errors being reported. It's just not applying.
What I want is to prevent users from saving anywhere except for My Documents. What am I missing? Computers are running XP SP3. Server is W2k3 SP2.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Works mostly now....but I cannot lock down C:\Documents and Settings\%username%. I do not want users to create files on this directory. When I create the setting for this path, the end result is C:\Documents and Settings\Documents and Settings\%username%. The setting adds Documents and Settings twice. Ideas?
I don't think that's possible, if they don't have permissions to their own profile folder your going to get all sorts of problems.
If you really want to do it you may have to use login scripts to remove the permission at login using xcacls: http://support.microsoft.c
Business Accounts
Answer for Membership
by: demazterPosted on 2009-11-05 at 06:31:10ID: 25749788
Are you applying the policy to computer objects?
If so have you run gpupdate /force and then restarted?