Group policy issue (change folder permissions)

[Ali147gta]

Hi All,
Trying to implement a group policy that restricts write access to the desktop

have created the policy, and under file security added the folder
%user profile%\desktop and added the user group with std read only permissions

However when I login to the client it still has the original permissions ??

RSOP shows the policy being applied correctly

Bit stuck ??

iMachiavellian - think dissident

 

[gmannatl]

Not a direct answer to your question, but here is how I have implemented this.

In pretty much all SBS installations I use Folder Redirection, and if so you can simple use icacls to set the permissions very easily on the entire tree where the redirection occurs. Further, if you want specific desktops for everyone or just to certain groups it makes it very easy to maintain. You can simply redirect all of a group or all users to a single location. So if you need to modify the desktop you only have one place to make the change and everyone gets updated instantly.

Folder Redirection is simply the way to go to implement this type of solution.