Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 215
  • Last Modified:

How do i lockdown desktops?

I have Windows Server 2003 Standard (SP2) running with a few clients connected (XP PRO SP2), i don't want domain users to be able to add files, shorcuts etc to the desktop, and i don't want them to delete anything from it.

What i want to do is to be able to add and remove desktop icons (domain admin) and add shorcuts etc.

How can i do this?
0
mollycoddel2004
Asked:
mollycoddel2004
  • 4
  • 3
1 Solution
 
LauraEHunterMVPCommented:
You need to deploy mandatory profiles: http://support.microsoft.com/kb/307800

Without mandatory profiles, each user has Full Control over their profile and can add and delete files/shortcuts at will.
0
 
mollycoddel2004Author Commented:
Can they still have full control even though i have redirected the desktop location to a folder user "folder redirection" in group policy and unchecked "grant user exclusive rights....."?
0
 
LauraEHunterMVPCommented:
The "grant user exclusive rights" check-box merely controls whether you can enforce additional ACLs on a redirected profile, such as allowing administrators rights to redirected profiles.  Removing this check-box will not affect the user's rights to their own profile.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
mollycoddel2004Author Commented:
Any other way, or just mandatory profiles which i don't really want to do.
0
 
LauraEHunterMVPCommented:
Nope.  Mandatory profiles are the only way to prevent users from adding/removing items from their desktop as you indicated in your original post.
0
 
mollycoddel2004Author Commented:
Thanks for the help so far, another question i have is, how can i, as an administrator, have full access to user documents etc.
0
 
LauraEHunterMVPCommented:
Assuming that you have selected the "grant user exclusive rights....." check-box, set permissions on the parent folder of your user home folders so that Administrators have Full Control.  On the Advanced tab under Security, confirm that this ACL is applied to the current folder + all files and subfolders.
0

Featured Post

Become an Android App Developer

Ready to kick start your career in 2018? Learn how to build an Android app in January’s Course of the Month and open the door to new opportunities.

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now