Group Policy to Lock Desktop

[vinhx76]

I want to implement a group policy or something in that nature to completedly lock down the desktop, where users cannot add, delete & modify the desktop, inlcuding renaming of the icons. What is the best way of doing this in a Windows enviroment. Server is Win2003 with 50 clients.

Thanks...

 

[JayAre]

First and foremost...you'll need the Group Policy Management Console.
http://www.microsoft.com/windowsserver2003/gpmc/default.mspx

From there you can create policies and apply them to the different OU's in your Active Directory scheme.

 

[vinhx76]

Yes, but how do we do it in GP?

 

[dbwillis]

First your users are not admins on the local workstations, right?

What group policies do you currently use? any?

 

[JayAre]

This should get you headed in the right direction.

http://support.microsoft.com/kb/930508

When you are in the GPMC, you can right click on the OU that you want the GP applied to. From there select "create new GP".

**disclaimer** these aren't step for step instructions...

 

[pcgeek86]

Give them read-only access to the .lnk files?

If you don't understand group policy, you really need to read about it, and understand it before you go around implementing it. If you have a specific question, I would address a forum like this one, but until then, you have some research to do.

Here is a FAQ to get you started:

http://technet2.microsoft.com/windowsserver/en/technologies/featured/gp/faq.mspx

 

[JayAre]

Another good book all about Domain GP's...

http://www.amazon.com/Microsoft-Windows-Group-Policy-Pro-One-Offs/dp/0735622175/sr=1-2/qid=1171720297/ref=pd_bbs_sr_2/105-0794369-6541232?ie=UTF8&s=books