Solved

Creating a managed Desktop via GPO

Posted on 2012-03-13
4
294 Views
Last Modified: 2012-03-19
I have most of my options to lock down a machine,  but my boss wants the user desktop to be read-only. Anyone know the best way to do this
0
Comment
Question by:DarthRater
4 Comments
 
LVL 21

Expert Comment

by:Joseph Moody
ID: 37716030
I would set up a mandatory profile for the user.

Or you can redirect the desktop (using folder redirection) to a fake location
0
 
LVL 38

Accepted Solution

by:
Adam Brown earned 500 total points
ID: 37716055
The easiest way to do it is to set a GPO Folder Preference that Updates the %Userprofile%\Desktop folder so it's read only.
0
 
LVL 9

Expert Comment

by:Ashok Dewan
ID: 37716138
Go to Desktop folder right click ----> properties --->security -----> advanced----> change permission ----->click on user then edit------->deny write and delete whatever you want to restrict.
1.png
2.png
0
 

Author Comment

by:DarthRater
ID: 37721297
@acbrown2010, that is a great suggestion, I'll try that.

@neil40m, that's easy for one, but not 800 users. :)
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now