• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 744
  • Last Modified:

Lock Down Desktop via GPO

Hey

I am wanting to lock down the Windows XP desktop from a Wndows 2003 GPO setting. The idea behind this is so users cannot add desktop icons, nor can they delete.

I have only seen one option in GPO which gives you the ability to Hide all Desktop icons, which does defeat the object for our environment.

Is there an option anywhere to stop 'Domain User' from allowing to change the desktop. This includes programs they install so that no shortcut desktop icon appears.

Thanks in advance.
0
mishcondereya
Asked:
mishcondereya
2 Solutions
 
dnudelmanCommented:
The best way to is rename their ntuser.dat file to ntuser.man. This is called a mandatory profile. While they will be able to change things, none of the changes will be saved.
0
 
Henrik JohanssonSystems engineerCommented:
Create a GPO and use Folder Redirection to redirect Desktop to a read-only share on a file server.
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now