How to prevent deleting desktop icons?

By ghaeedansiyamack ·
My work computers are joined to a domain in AD 2003. I have enabled the ?Prohibit Deleting Items? located in User Configuration\Desktop\Active Desktop in Active Directory for all users, but my users are still able to delete ANY desktop icons on their desktop (i.e. My Computer, IE, My Network Places). Is there any way in AD to prevent users from deleting icons that were created by the administrator?
Any help would be appreciated.

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Answers

Collapse -

re: deleting desktop icons.............

by ThumbsUp2 In reply to How to prevent deleting d ...

The icons for My Computer, IE and My Network Places are not created by the Administrator. They are system icons which can be hidden. Chances are, the users are changing their desktop appearance to hide the icons (right click desktop and choose properties, then choose Desktop tab and Customize Desktop). Do you have a policy in place to prevent them from customizing their desktop?

Collapse -

issue fixed

by ghaeedansiyamack In reply to re: deleting desktop icon ...

Thank you for your advice. Actually, yes I do have AD in place and I was able to find a policy in AD that prevents users from deleting desktop icons. In AD you can go to Admin Templates >> Desktop >> Active Desktop and enable Prohibit Changes.

Collapse -

RE: How to prevent deleting desktop icons?

by shawn.martin In reply to How to prevent deleting d ...

1. Log in with a local or domain administrators account.

2. Navigate to the user's profile folder, and open it.

3. Take ownership of the desktop folder, and de-select the inherit permissions check box.

4. Remove the user from the permissions access list. Then re-add him. The users permissions now should be read, execute, and and list.

5. Make sure that domain users, and users are not in the local administrators group. Power Users is OK.

I believe that Group policy at the domain level has a tool for this, but I posted anyway, because someone without domain admin power might have to implement this. This will also prevent then from adding icons also.

Related Discussions

Related Forums