Solved

Prevent users to create shortcuts on desktop

Posted on 2004-08-23
12
2,482 Views
Last Modified: 2013-11-21
Hi,
In Windows 2003 server (Terminal Server)
I like to prevent users to create shortcuts on desktop.
I can use either registry key, Plolicy or any other idea.

Thank you.

Adi
0
Comment
Question by:abendv_10
  • 2
  • 2
  • 2
  • +4
12 Comments
 
LVL 2

Expert Comment

by:GHemphill
ID: 11869848
A simple answer?  Make the desk top Read Only to the user(s).  Only allow the Adminsitration account.
0
 

Expert Comment

by:bfens2
ID: 11869858
you could give them a mandatory profile.
then when they log off and then back on, any settings they have changed will be reverted back to origninal.
0
 
LVL 57

Expert Comment

by:Pete Long
ID: 11869870
Hi GHemphill,
Disable "Save Desktop on Exit"

Default behaviour for XP is to save the desktop configuration on exiting the operating system. To prevent saving the desktop configuration, implement the following registry edit.


[Start] [Run] [Regedit]
Registry Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Modify/Create the Value Data Type(s) and Value Name(s) as detailed below.
Data Type: REG_DWORD (Dword Value) // Value Name: NoSaveSettings
Setting for Value Data: [0 = Disabled / 1 = Enabled]
Exit Registry and Reboot


From http://www.theeldergeek.com/disable_save_desktop_configurati.htm

or rename their ntuser.dat file to ntuser.man

PeteL
0
 

Expert Comment

by:bfens2
ID: 11869914
GHemphills answers sounds good, but if the desktop locations are diffenrent for each user, it will be a big hassle going around locating all the folders and making them read only.
you could also use group policy to hide the desktop so they only use start menu
0
 
LVL 3

Expert Comment

by:NIPPLES
ID: 11877270
You could create a program that deletes *.ink from the desktop that runs at startup.  Or even add some lines to autoexec.bat like so...

cd C:/documents and settings/usename/desktop
del *.ink

those lines should delete all shortcuts whenever the computer starts up.

I prefer to do things by programming than use windows features ;o)
0
Why won’t your email signature format correctly?

Struggling to get your corporate email signatures to format correctly? Does the logo keep resizing? Is the text appearing too big? What can you do to prevent this? Find out how you can save your signatures today.

 
LVL 3

Expert Comment

by:NIPPLES
ID: 11877277
If you can work with VB then u use

Kill

followed by the pathname, then file name eg:

kill "C:/documents and settings/usename/desktop/*.ink"

should work

regards,

NIPPLES
0
 
LVL 4

Expert Comment

by:LittleRed1
ID: 11890749
I usually remove user's write and execute permissions to the desktop. This prevents them from creating files or shortcuts on the desktop and prevents them from executing files if they happen to find a way of downloading stuff to the desktop. I use XCACLS to do this, something like:

xcacls %userprofile%\desktop /t /c /p %username%:r;xr system:f administrators:f /y

Just adjust the permissions to suite your needs.
0
 
LVL 18

Expert Comment

by:exx1976
ID: 11908562
In our terminal services environment, users not only have mandatory profiles, but they also have read-only profiles, and the context menus (right-click) have been disabled.

HTH,
exx1976
0
 
LVL 57

Expert Comment

by:Pete Long
ID: 13566402
loads of workable solutions but no feedback :(
0
 
LVL 1

Accepted Solution

by:
BooMod earned 0 total points
ID: 13667897
PAQed with no points refunded (of 250)

BooMod
EE Admin - Special Projects/
Community Support Moderator
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Just about everyone has an old PC laying around.  Ask anyone in the IT industry, whether they are a professional or play in it as a hobby.  From outdated Desktops to cheap "throwaway" laptops, they are all around and not as hard to "fix up" as you m…
In a recent article here at Experts Exchange (http://www.experts-exchange.com/articles/18880/PaperPort-14-in-Windows-10-A-First-Look.html), I discussed my nine-month sandbox testing of the Windows 10 Technical Preview, specifically with respect to r…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

929 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now