Solved

GPO's

Posted on 2007-03-21
6
642 Views
Last Modified: 2012-05-05
What gpo setting would take away C:\Documents and Settings\All Users\Desktop incons?
0
Comment
Question by:decavitch
6 Comments
 
LVL 30

Accepted Solution

by:
LauraEHunterMVP earned 168 total points
ID: 18764067
Depends on what you mean by "take away".  There's an entire section under User Configuration-->Administrative Templates-->Desktop that will allow you to configure the following:

Hide and disable all items on the desktop
Remove My Documents icon on the desktop
Remove My Computer icon on the desktop
Remove Recycle Bin icon from desktop
Remove Properties from the My Documents context menu
Remove Properties from the My Computer context menu
Remove Properties from the Recycle Bin context menu
Hide My Network Places icon on desktop
Hide Internet Explorer icon on desktop
Do not add shares of recently opened documents to My Network Places
Prohibit user from changing My Documents path
Prevent adding, dragging, dropping and closing the Taskbar's toolbars
Prohibit adjusting desktop toolbars
Don't save settings at exit
Remove the Desktop Cleanup Wizard

If you're talking about creating a true "read-only" desktop profile for a student/lab/kiosk/library computer, you'll need to set up a mandatory user profile. You can assign the profile path using AD Users & Computers for the user(s) in question, then create the mandatory profile using the following steps: http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/lsm_profile_mandatory_assign.mspx?mfr=true

Hope this helps.

Laura E. Hunter - Microsoft MVP: Windows Server - Networking
0
 
LVL 6

Expert Comment

by:mattyfonz
ID: 18764240
LauraEHunterMVP is correct
however you can also do this by redirecting the desktop and startmenu if you wish too.
the setting for redirection is under user settings windows settings if i remember correctly
for desktop only, use the option to redirect it to a folder on your server. make sure the folder is read only to the users that willl be using it so they cant change it. then add whatever icons you want them to have in that folder.
0
 
LVL 6

Assisted Solution

by:mattyfonz
mattyfonz earned 166 total points
ID: 18764257
forgot to mention make sure the read only folder is shared with read permissions for the users and theres a folder named desktop in the share which is where the icons will be located
0
 
LVL 6

Assisted Solution

by:kennyhenao
kennyhenao earned 166 total points
ID: 21057513
Go to the security tab of the Desktop folder under all users and deny read access to those users/groups.  You can all do this for the start menu.  This will eliminate all icons from Desktop and Start Menu.
0
 
LVL 1

Expert Comment

by:Computer101
ID: 21286102
Forced accept.

Computer101
EE Admin
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Starting in Windows Server 2008, Microsoft introduced the Group Policy Central Store. This automatically replicating location allows IT administrators to have the latest and greatest Group Policy (GP) configuration settings available. Let’s expl…
In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now