We help IT Professionals succeed at work.

Creating a managed Desktop via GPO

I have most of my options to lock down a machine,  but my boss wants the user desktop to be read-only. Anyone know the best way to do this
Comment
Watch Question

Joseph MoodyBlogger and wearer of all hats.
CERTIFIED EXPERT

Commented:
I would set up a mandatory profile for the user.

Or you can redirect the desktop (using folder redirection) to a fake location
Senior Systems Admin
CERTIFIED EXPERT
Top Expert 2010
Commented:
The easiest way to do it is to set a GPO Folder Preference that Updates the %Userprofile%\Desktop folder so it's read only.
Ashok DewanFreelancer
CERTIFIED EXPERT

Commented:
Go to Desktop folder right click ----> properties --->security -----> advanced----> change permission ----->click on user then edit------->deny write and delete whatever you want to restrict.
1.png
2.png

Author

Commented:
@acbrown2010, that is a great suggestion, I'll try that.

@neil40m, that's easy for one, but not 800 users. :)

Explore More ContentExplore courses, solutions, and other research materials related to this topic.