Lock Down Desktop via GPO


I am wanting to lock down the Windows XP desktop from a Wndows 2003 GPO setting. The idea behind this is so users cannot add desktop icons, nor can they delete.

I have only seen one option in GPO which gives you the ability to Hide all Desktop icons, which does defeat the object for our environment.

Is there an option anywhere to stop 'Domain User' from allowing to change the desktop. This includes programs they install so that no shortcut desktop icon appears.

Thanks in advance.
Who is Participating?
dnudelmanConnect With a Mentor Commented:
The best way to is rename their ntuser.dat file to ntuser.man. This is called a mandatory profile. While they will be able to change things, none of the changes will be saved.
Henrik JohanssonConnect With a Mentor Systems engineerCommented:
Create a GPO and use Folder Redirection to redirect Desktop to a read-only share on a file server.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.