locked
Prevant Users to save file on desktop and my document RRS feed

  • Question

  • I want to prevant user to save file on desktop and documents.

    We have Windows server 2008 Domain and windows Xp & 7 clients.

    We want all user save their data on network drive instead of their pc desktop and my documents.

    How can i restrict them?

    Any suggestion is highly appreciate.

    Rgd

    Arvind Dahiya


    Arvind

    Tuesday, February 14, 2012 5:54 AM

Answers

  • Hello,

    you cannot really block them from saving to the desktop as this is the place where the user accounts require FC permission to work. But what you should do in your case is working with Folder Redirection to the network drive you are using for the data.

    http://technet.microsoft.com/en-us/library/cc732275.aspx

    http://technet.microsoft.com/en-us/library/ff458273(v=ws.10).aspx


    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    • Marked as answer by Lawrence, Monday, February 20, 2012 1:35 AM
    Tuesday, February 14, 2012 8:45 AM
  • I agree with Meinolf - you can't really restrict access to the folders you're specifying and folder redirection is the answer.

    If there are other folders you wish to restrict, though, they can be via group policy.  Follow the instructions at http://technet.microsoft.com/en-us/library/cc756952(v=ws.10).aspx

    In brief:

    1. In the console tree, right-click File System (Computer Configuration/Windows Settings/Security Settings/File System)

    2. Click Add File, in Add a file or folder, click the file or folder that you want to change, and then click OK.
    3. Define permissions

    Thanks,

    Paul.

    • Marked as answer by Lawrence, Monday, February 20, 2012 1:35 AM
    Tuesday, February 14, 2012 4:01 PM
  •  
    > I want to prevant user to save file on desktop and documents.
    >
    > We want all user save their data on network drive instead of their pc
    > desktop and my documents.
     
    Redirect Desktop and Documents to the given network drive and use
    individual subfolders. OR redirect to a prepopulated share where you set
    read only permissions (yes, Mark Heitbrink and I did a test a while ago
    and it works!)
     
    sincerely, Martin
     

    A bissle "Experience", a bissle GMV... Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
    • Marked as answer by Lawrence, Monday, February 20, 2012 1:35 AM
    Tuesday, February 14, 2012 5:01 PM
  • Hi,

    Thanks for your posting.

    I really agree with above postings. It’s good way to redirect user’s Desktop or My Documents to a network driver rather than prevent user to save files into them.

    We can set home folder for individual user, and then redirect user’s Document and My Documents to home folder. Or redirect these tow folders to network driver directly.

    Please refer to following MS articles to deploy it:

    Add a home folder to a profile
    http://technet.microsoft.com/en-us/library/cc785843(v=WS.10).aspx
    Redirect My Documents to the home directory
    http://technet.microsoft.com/en-us/library/cc783674(v=WS.10).aspx
    Recommendations for Folder Redirection
    http://technet.microsoft.com/en-us/library/cc785925(v=WS.10).aspx

    Lawrence

    TechNet Community Support

    • Marked as answer by Lawrence, Monday, February 20, 2012 1:35 AM
    Wednesday, February 15, 2012 5:45 AM

All replies

  • Hello,

    you cannot really block them from saving to the desktop as this is the place where the user accounts require FC permission to work. But what you should do in your case is working with Folder Redirection to the network drive you are using for the data.

    http://technet.microsoft.com/en-us/library/cc732275.aspx

    http://technet.microsoft.com/en-us/library/ff458273(v=ws.10).aspx


    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    • Marked as answer by Lawrence, Monday, February 20, 2012 1:35 AM
    Tuesday, February 14, 2012 8:45 AM
  • I agree with Meinolf - you can't really restrict access to the folders you're specifying and folder redirection is the answer.

    If there are other folders you wish to restrict, though, they can be via group policy.  Follow the instructions at http://technet.microsoft.com/en-us/library/cc756952(v=ws.10).aspx

    In brief:

    1. In the console tree, right-click File System (Computer Configuration/Windows Settings/Security Settings/File System)

    2. Click Add File, in Add a file or folder, click the file or folder that you want to change, and then click OK.
    3. Define permissions

    Thanks,

    Paul.

    • Marked as answer by Lawrence, Monday, February 20, 2012 1:35 AM
    Tuesday, February 14, 2012 4:01 PM
  •  
    > I want to prevant user to save file on desktop and documents.
    >
    > We want all user save their data on network drive instead of their pc
    > desktop and my documents.
     
    Redirect Desktop and Documents to the given network drive and use
    individual subfolders. OR redirect to a prepopulated share where you set
    read only permissions (yes, Mark Heitbrink and I did a test a while ago
    and it works!)
     
    sincerely, Martin
     

    A bissle "Experience", a bissle GMV... Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
    • Marked as answer by Lawrence, Monday, February 20, 2012 1:35 AM
    Tuesday, February 14, 2012 5:01 PM
  • Hi,

    Thanks for your posting.

    I really agree with above postings. It’s good way to redirect user’s Desktop or My Documents to a network driver rather than prevent user to save files into them.

    We can set home folder for individual user, and then redirect user’s Document and My Documents to home folder. Or redirect these tow folders to network driver directly.

    Please refer to following MS articles to deploy it:

    Add a home folder to a profile
    http://technet.microsoft.com/en-us/library/cc785843(v=WS.10).aspx
    Redirect My Documents to the home directory
    http://technet.microsoft.com/en-us/library/cc783674(v=WS.10).aspx
    Recommendations for Folder Redirection
    http://technet.microsoft.com/en-us/library/cc785925(v=WS.10).aspx

    Lawrence

    TechNet Community Support

    • Marked as answer by Lawrence, Monday, February 20, 2012 1:35 AM
    Wednesday, February 15, 2012 5:45 AM
  • Use folder redirection for the My Documents folder to a Windows File Server. Then implement File System Filter on that folder that the users My Documents it re-directed to. When the user is onlin and tries to save the file it will be blocked. However if they are offline it will work and will just fail to sync when they are next online...

    Hope it helps


    Alan Burchill (MVP)
    http://www.grouppolicy.biz

    @alanburchill

    • Proposed as answer by Alan Burchill Wednesday, February 15, 2012 5:55 AM
    Wednesday, February 15, 2012 5:54 AM
  • Hi

    Thanks for update.

    I have fix folder re-direction.

    Desktop & My documents now saved on network drive.

    But we have issue with MS Outlook Files, because some users have 2-4GB Pst files and

    whenever outlook open from network drive it will work slow.

    Any help or comment on outlook issue will appreciate.


    Arvind

    Monday, March 5, 2012 5:10 AM
  • Hi

    I want to create group policy for all user's to re-direct desktop and docs to network drive.

    But on network drive all users have separate home folders.

    then how can i define separate path for all users

    e.g

    1. User 1(abc) : common\employee\service\abc

    2. User2 (xyz):common\employee\Hr\xyz

    but in group policy we can give only one path to all users.

    Any help is appreciate.

    Arvind


    Arvind

    Monday, March 19, 2012 4:22 AM
  •  many people are saying you can't actually stop people from saving on the desktop and my documents. well there is a way i do that all the time at our institution internet cafe, the PC's have small sized HDD and they easily fill-up coz lots of students want to save their download and do not delete them after they have transferred to their removable disks. so i had to partition the hard drive and changed the default saving path to d as well as changed the browser downloads folder location to d. restrict saving on the desktop and my documents can be done using group policy. Ok am assuming you are on windows xp

    1. go start on run type cmd or go start,all programs, accessories,command prompt (click the command prompt icon) in command prompt

    2. type gpedit.msc (press enter) make sure you are logged in with an account with administrative rights. then  to your far left bottom you should have a list of menus in folder like icons

    3. click on the administrative templates the one on the bottom of the list. it will expand and give you another list of menu

    4. click on the windows components menu after it have expanded check on the central part on the same window it displays the sub menu expansion list(not only after this option it always does after you have selected an option) but it giveas a wide view for easily identifying the optional menus you want to click or configure. 

    5. click on "windows explorer " option click on it and while it has expanded to the other sub menus search for the option "restrict access to the following drives" double click it and on the (drop menu selection box arrow) click it and select drive C click apply then OK. try saving something to your desktop. this does work for me i do all my restrictions with group policy. let me know if it works.

    Wednesday, May 9, 2012 12:02 PM