We help IT Professionals succeed at work.

Restrict access to delete/create new items on desktop via group policy

dankitchen
dankitchen asked
on
Hi All,

I have an SBS2010 box, clients are a mix of vista/win7 im tring to make the desktops read only so that users cannot save to their desktop or create new folders etc.

I have created a file security policy which gives the correct RO permissions on the %userprofile%\desktop  however they are no applied ? Am i missing something obvious here ?
Comment
Watch Question

Brian PiercePhotographer
Awarded 2007
Top Expert 2008

Commented:
How and where are you applying it?

Author

Commented:
Its being applied at the mybusiness\users OU

Author

Commented:
i have also tried applying it to the sbscomputers ou with no joy either
Brian PiercePhotographer
Awarded 2007
Top Expert 2008

Commented:
If its being applied to users, then it must be applied to the OU where the user accounts are, if its being applied to computers it must be applied to the OU where the computer accounts are