Question

  • Creator
    Topic
  • #3987596

    Group Policy – Desktop only

    by edwaldneo ·

    Dear All,
    I have activated “Prevent access to drives from My Computer” tp restrict all drives. If I would like to only allow user to create files / folders in the desktop environment. How do I do that ?

You are posting a reply to: Group Policy – Desktop only

The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our Community FAQs for details. All submitted content is subject to our Terms of Use.

All Answers

  • Author
    Replies
    • #3987600

      Re: desktop only

      by kees_b ·

      In reply to Group Policy – Desktop only

      What exactly do you mean with “desktop environment”? The folder c:\users\<username>\desktop? That’s a folder, not an ‘environment’. How many different users?

      Surely, a user also needs write access to the c:\users\<username>\appdata and c:\windows\temp to do anything useful. And if you have write access to a folder, you can save files there.

      Log in as administrator and set access permissions (in right click>properties) for folders as you want them. You also might want to redirect My Documents and such folders to a subfolder of the desktop.

      Finally, I’m afraid that any portable file manager the user can copy to his appdata folder (or his desktop folder) will allow access to everything allowed by the permissions. Such a file manager won’t honor the policies for My Computer and File Explorer. Nor, by the way, does Linux when running from DVD or USB-stick.

      You’ve given yourself a rather difficult target.

Viewing 0 reply threads