Announcement

Collapse
No announcement yet.

Prevent users from deleting shortcuts

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Prevent users from deleting shortcuts

    Hi Guys,

    We are turning a big Call Center into Windows XP SP2, with Active directory environment after too many years with W95
    I have created GPO with a lot of restrictions, but did not find YET the option to dissalow them deleting shortcuts from desktop, perhaps i skipped that option, can any1 advice me where to find that gpo setting, and about some more TIPS on how to well restrict users?
    The policy is really good, but advices are always usefull.

    Thanks,
    Retaliator.
    Thanks & Regards

    Retaliator

    MCSA/MCSE/CCNA
    Computer Science Graduate

  • #2
    Re: Prevent users from deleting shortcuts

    there is no actual policy for this, this would need to be done via permissions.

    another thing you can do if they are going to have a standard desktop is you could create a mandatory profile.

    here is an MS article on this:

    http://technet2.microsoft.com/window....mspx?mfr=true
    Technology is only as good as those who use it

    My tech blog - wiredtek.wordpress.com

    Comment


    • #3
      Re: Prevent users from deleting shortcuts

      I know about mandatory profiles, but wanted a better solution.
      Thanks.
      Thanks & Regards

      Retaliator

      MCSA/MCSE/CCNA
      Computer Science Graduate

      Comment


      • #4
        Re: Prevent users from deleting shortcuts

        You could try removing modify permission on the desktop folder (in Documents and Settings/username)

        If that doesnt work, try explicitly deny modify permission
        Tom Jones
        MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
        PhD, MSc, FIAP, MIITT
        IT Trainer / Consultant
        Ossian Ltd
        Scotland

        ** Remember to give credit where credit is due and leave reputation points where appropriate **

        Comment


        • #5
          Re: Prevent users from deleting shortcuts

          Yep thanks, i really thought there should be a nice GPO setting for that.

          Retaliator
          Thanks & Regards

          Retaliator

          MCSA/MCSE/CCNA
          Computer Science Graduate

          Comment


          • #6
            Re: Prevent users from deleting shortcuts

            Ossian, removing modify is allright, but if i want to add shortcuts from a script will it work?
            Thanks & Regards

            Retaliator

            MCSA/MCSE/CCNA
            Computer Science Graduate

            Comment


            • #7
              Re: Prevent users from deleting shortcuts

              Write permission is enough to create files, modify is needed to delete them

              Tom
              Tom Jones
              MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
              PhD, MSc, FIAP, MIITT
              IT Trainer / Consultant
              Ossian Ltd
              Scotland

              ** Remember to give credit where credit is due and leave reputation points where appropriate **

              Comment


              • #8
                Re: Prevent users from deleting shortcuts

                Thanks

                Retaliator
                Thanks & Regards

                Retaliator

                MCSA/MCSE/CCNA
                Computer Science Graduate

                Comment


                • #9
                  Re: Prevent users from deleting shortcuts

                  Hey, Retaliator.
                  Let me know if it worked with NTFS permissions. I had the same problem here, and didn't manage to solve it with NTFS permissions. It was solved when I went for roaming profiles, that I needed anyway.

                  Sorin Solomon


                  In order to succeed, your desire for success should be greater than your fear of failure.
                  -

                  Comment


                  • #10
                    Re: Prevent users from deleting shortcuts

                    Well, i removed the modify permissions, and they can't delete now any short cut, as long as they are not Administrators.
                    I really need some advices with that project, 50-70 workstations from win95 to winxp with gpo, i might set the profile and all desktop folders on a file server instead of local machines.
                    Thanks & Regards

                    Retaliator

                    MCSA/MCSE/CCNA
                    Computer Science Graduate

                    Comment


                    • #11
                      Re: Prevent users from deleting shortcuts

                      I tried to change thier profile on Active Directory like that,
                      and then when i put a shortcut or any file on the path,
                      and the user logs on he gets that and that's good,
                      but if i delete that from the server, it still appears on the user's desktop,
                      and when he logs off it copies that back to the server..
                      How to fix that?

                      Retaliator.

                      Click image for larger version

Name:	123.GIF
Views:	1
Size:	21.9 KB
ID:	463280
                      Thanks & Regards

                      Retaliator

                      MCSA/MCSE/CCNA
                      Computer Science Graduate

                      Comment


                      • #12
                        Re: Prevent users from deleting shortcuts

                        I also added the feature inside GPO for folder redirection,
                        still it copies and remains on the desktop on target machine,
                        why it still uses the local desktop folder there together with the server roaming profile?
                        I deleted desktop folder on the local machine, what is happening is that upon logon it copies the Desktop dir from the server.
                        I want the Server to be the STRONG side, that if i put there a shortcut it will appear in seconds with out logoff, and that they can't change anything on the desktop, and only admins can add/delete shortcuts on the server and it will update all machines.

                        Thanks,
                        Retaliator
                        Last edited by Retaliator; 4th September 2007, 11:54. Reason: more info
                        Thanks & Regards

                        Retaliator

                        MCSA/MCSE/CCNA
                        Computer Science Graduate

                        Comment


                        • #13
                          Re: Prevent users from deleting shortcuts

                          I would check in the GPO - Computer Configuration -> Administrative Templates -> System -> User Profiles -> Prevent Roaming Profiles changes to propagate to the server . It should do what you are trying to achieve.
                          If not, consider making the profiles mandatory.
                          Relevant link: http://support.microsoft.com/kb/307800

                          Sorin Solomon


                          In order to succeed, your desire for success should be greater than your fear of failure.
                          -

                          Comment


                          • #14
                            Re: Prevent users from deleting shortcuts

                            Thanks, for now i gave up on the idea,
                            if needed i will just use scripts to copy shortcuts to the workstations.
                            still with out modify permissions.

                            Retaliator
                            Thanks & Regards

                            Retaliator

                            MCSA/MCSE/CCNA
                            Computer Science Graduate

                            Comment


                            • #15
                              Re: Prevent users from deleting shortcuts

                              Sorin, the issue with NTFS permissions, now i can ADD shortcuts from script, but there is no way to delete them..
                              Thanks & Regards

                              Retaliator

                              MCSA/MCSE/CCNA
                              Computer Science Graduate

                              Comment

                              Working...
                              X