Solved

Lock Down Desktop via GPO

Posted on 2008-06-19
4
738 Views
Last Modified: 2009-12-07
Hey

I am wanting to lock down the Windows XP desktop from a Wndows 2003 GPO setting. The idea behind this is so users cannot add desktop icons, nor can they delete.

I have only seen one option in GPO which gives you the ability to Hide all Desktop icons, which does defeat the object for our environment.

Is there an option anywhere to stop 'Domain User' from allowing to change the desktop. This includes programs they install so that no shortcut desktop icon appears.

Thanks in advance.
0
Comment
Question by:mishcondereya
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 6

Accepted Solution

by:
dnudelman earned 250 total points
ID: 21823876
The best way to is rename their ntuser.dat file to ntuser.man. This is called a mandatory profile. While they will be able to change things, none of the changes will be saved.
0
 
LVL 31

Assisted Solution

by:Henrik Johansson
Henrik Johansson earned 250 total points
ID: 21824209
Create a GPO and use Folder Redirection to redirect Desktop to a read-only share on a file server.
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…
I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question