[THIN] Re: Published Desktop lockdown

  • From: "Bill Sorenson" <bsorenson@xxxxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Fri, 14 Jul 2006 07:19:45 -0500

Angela,

We accomplish this by relocating the Desktop to a different location
within the Group Policy and removing the user's ability to modify within
that folder.  If they all have the same desktop, it's quick and easy.
If they need to each have their own desktops, it's more time consuming.

We do the same with the Start menu.  I will say that some of our users
"demand" the ability to add and change things on their desktops, so in
those cases, we give them access to the Desktop folder but make the
"standard" applications Read Only.

Bill
 

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Angela Smith
Sent: Friday, July 14, 2006 6:43 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Published Desktop lockdown

Hi

Ive just built a new farm based on Windows 2003 and Citrix Metaframe
Presentation Server 4.  Ive published a desktop and am looking for the
best way to lockdown the "published desktop".  Im using Group Policy and
have set several settings to lock the published desktop.  I have an
issue where I don't want the users to see/access the servers local
drives.  Ive accomplished this via the following settings:

User Configuration\Administrative Templates\windows components\windows
explorer\Hide these specified drives in My Computer User
Configuration\Administrative Templates\\windows components\windows
explorer\Prevent access to drives from My Computer

My issue is that the users can create folders on the desktop but cannot
delete them (due to the above Group Policy settings).  How can I easily
prevent the users from being able to make any changes to the desktop?

As a side note, how do people control what icons are created on the
desktop??  I was thinking of using a script that copies icons to the
desktop based on AD group membership.  Is there a better way to do this?

Thanks

_________________________________________________________________
Research and compare new cars side by side at carpoint.com.au
http://a.ninemsn.com.au/b.aspx?URL=http%3A%2F%2Fsecure%2Dau%2Eimrworldwi
de%2Ecom%2Fcgi%2Dbin%2Fa%2Fci%5F450304%2Fet%5F2%2Fcg%5F801459%2Fpi%5F100
4813%2Fai%5F833884&_t=54321&_r=hotmail_endtext&_m=EXT

************************************************
For Archives, RSS, to Unsubscribe, Subscribe or set Digest or Vacation
mode use the below link:
//www.freelists.org/list/thin
************************************************


************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
//www.freelists.org/list/thin
************************************************

Other related posts: