Saving/downloading to desktop

[sraymond]

Hi all,
I know this question has been bandied about a bit, but I can't figure out what the current upshot is? Can one prohibit users from saving/downloading to the desktop by use of Group Policies? thanks! Sandy

[Scott]

You can set the user Desktop to read only to prevent downloading to it with the NTFS file permissions.

Using GPEDIT.MSC, there is not a standard way to prevent writing to the users Desktop, but you can disable the icons on it and not save it on exit.



--Scott

[Philip - Long Beach NY]

I had this similar problem years ago. I can't use the group policy feature cause I have other MS office apps that they need access to. I just use TrustNoExe to prohibit any executable but allow all document types to open. Never had a problem with it, and it comes with a customizable message that will pop up when a patron tries to execute the denied file. You can also allow programs installed on the machine to run that aren't in the Programs folder by default. The utility runs from the control panel and is only accessible from an admin account.

http://www.beyondlogic.org/solutions/tr ... no-exe.htm

I use Deep Freeze to get rid of any unwanted icons that happen to show up on the desktop during the course of the day.

Hope this helps,

Philip