We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you two Citrix podcasts. Learn about 2020 trends and get answers to your biggest Citrix questions!Listen Now


Setting up Domain Policies

eteran asked
Medium Priority
Last Modified: 2010-04-13

I am trying to set up domain policies for everyone in the domain. Let say some one logs in to the domain is there a way for me to tellthe domain that they can only save thing on there folder on the server. They can not save anything local. How can I do this can some one help I am on a win2k server
Watch Question

Top Expert 2006

you cant stop this via GPO, you can however setup homedrives or redirection polices that redirect to the server when they save to something like my documents
Also setup some IT Policies that staff are made aware of.  Get them to sign them then bust them when they disobey them.  While your writing the usage policy include appropriate usage of intenet & email as well.  Technology can stop most things but scaring people works great too. Generally used in conjuction with technology policies are another great way to enforce 'stuff'



Is there anyway I can program this. What can I do to accomplish this to work correctly

Have a read here


Instructions on folder redirection



okay this last post helped, but now can I set up a policy for user not to save anything on the C:\ drive of the computer they are using
Not sure to be honest mate.  Sounds dangerous to enforce no write access to the C Drive.  I don't think it would work.  Temp files would need to be created to run apps, profiles have to write to documents and settings folder.  I think you'd be better of letting the users run as non-admin/power users and redirect their home Folders/My Documents onto the server.  Combine that with user education about not saving locally onto the C Drive would be less headache.  Locking down the whole C:\ would cause more issues I think.

Any thoughts Jay?

Top Expert 2006
NTFS permissions would be wiser than trying anything else, you can prevent write but allow read and execute and you SHOULD be ok, but i wouldnt restrict to heavily...

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.