I would like to set up our users computers, so that they cannot save new items to the desktop. But I still want them to be able to edit their timecard which is already on the desktop.
We have group policy set up on a Win Server 2003 box, so if there's a viable option in there - I'll take it.
I've tried changing the permissions of the users desktop folder to read-only with CACLS, and then changing the permissions on the timesheet to full control. That stops them from adding anything new, but they also still can't save at all - I don't understand why, since the effective permissions on the file is full control.
I can do logon scripts, kixtart, group policy, or even manually if I really have to. But it's not such a critical thing that I want to purchase software for it.