I want to accomplish the following task: A user must not have rights to save on their Desktop, My Documents, My Music, My Videos, My Pictures, etc.
I have already prevented and hidden all drives via GPO. However, user are still able to store files in the locations listed above.
Server OS: Windows Server 2008 R2
Client OS: Windows XP, Windows Vista and Windows 7
It’s very easy if you are using Windows Server 2008.
Create a Group Policy Object, go to Computer Configuration >
Policy > Windows Settings > Security Settings > File System
Right click and add %userprofile%\Desktop …etc for the different folders that you want to restrict access to.
Specify the rights for the specified folder(s) for users or user groups.