Solved

Lock Down Desktop via GPO

Posted on 2008-06-19
4
733 Views
Last Modified: 2009-12-07
Hey

I am wanting to lock down the Windows XP desktop from a Wndows 2003 GPO setting. The idea behind this is so users cannot add desktop icons, nor can they delete.

I have only seen one option in GPO which gives you the ability to Hide all Desktop icons, which does defeat the object for our environment.

Is there an option anywhere to stop 'Domain User' from allowing to change the desktop. This includes programs they install so that no shortcut desktop icon appears.

Thanks in advance.
0
Comment
Question by:mishcondereya
4 Comments
 
LVL 6

Accepted Solution

by:
dnudelman earned 250 total points
ID: 21823876
The best way to is rename their ntuser.dat file to ntuser.man. This is called a mandatory profile. While they will be able to change things, none of the changes will be saved.
0
 
LVL 31

Assisted Solution

by:Henrik Johansson
Henrik Johansson earned 250 total points
ID: 21824209
Create a GPO and use Folder Redirection to redirect Desktop to a read-only share on a file server.
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This may not be a text book method to resolve VSS backup issues but it seemed to have worked on few of the Windows 2003 servers we had issues while performing a Volume Shadow Copy backup. If you have issues while performing a shadow copy backup usin…
I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
This is a video that shows how the OnPage alerts system integrates into ConnectWise, how a trigger is set, how a page is sent via the trigger, and how the SENT, DELIVERED, READ & REPLIED receipts get entered into the internal tab of the ConnectWise …
Delivering innovative fully-managed cloud services for mission-critical applications requires expertise in multiple areas plus vision and commitment. Meet a few of the people behind the quality services of Concerto.

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now