George Masters [MSFT]
April 18th 03, 09:47 PM
You can do this, but its not terribly simple.
You restrict this possibility by changing the permissions
on the Desktop folder. However, any administrator can
change them again, so you can only really succeed if the
account owning the desktop is not a member of the
administrators group for the machine, but more on this
later.
The simplest way:
1. Locate the "Desktop" folder under "Documents and
Settings", and the username for the account. Right click
on the desktop folder, and select "Properties".
2. Under "Security" you will find a list of users or
groups. As you select each one, you will see a row of
checkboxes that indicates rights that each of these users
(or groups of users) has on that folder. Probably the
last one will be the owning user account. Select this one
3. If the checkboxes are grayed, click the "Advanced"
button, and uncheck the "Inherit from parent..." box, and
choose to copy the settings data.
4. Return to the first dialog and unclick the "Write"
privilege.
This will prevent users from writing to this folder, which
would prevent creation of any desktop shortcuts.
Unfortunately, as I said before, the owner of the folder
(the account that logs on with this account) and members
of the administrators group can reset the permissions to
allow writing again.
You can fix this if the user account is not an
administrator. Then the proper thing to do is:
1. Log on as administrator
2. Locate the desktop folder for the user account, right
click, select properties, go to security.
3. Uncheck "Inherit...", choose "copy", then click
the "Owner" tab on the same dialog. Reassign ownership of
this folder to the administrators group. Click "Apply".
4. Close that dialog to return to the security properties
again. Select the user, and uncheck "Write". Make sure
that "Read", "Read and Execute" and "List Folder Contents"
are checked.
This posting is provided "AS IS" with no warranties, and
confers no rights.
>-----Original Message-----
>Is there anyway to disable the creation or functionality
>of new shortcuts on the desktop? Or remove the option to
>create them from the right click context menu?
>.
>
You restrict this possibility by changing the permissions
on the Desktop folder. However, any administrator can
change them again, so you can only really succeed if the
account owning the desktop is not a member of the
administrators group for the machine, but more on this
later.
The simplest way:
1. Locate the "Desktop" folder under "Documents and
Settings", and the username for the account. Right click
on the desktop folder, and select "Properties".
2. Under "Security" you will find a list of users or
groups. As you select each one, you will see a row of
checkboxes that indicates rights that each of these users
(or groups of users) has on that folder. Probably the
last one will be the owning user account. Select this one
3. If the checkboxes are grayed, click the "Advanced"
button, and uncheck the "Inherit from parent..." box, and
choose to copy the settings data.
4. Return to the first dialog and unclick the "Write"
privilege.
This will prevent users from writing to this folder, which
would prevent creation of any desktop shortcuts.
Unfortunately, as I said before, the owner of the folder
(the account that logs on with this account) and members
of the administrators group can reset the permissions to
allow writing again.
You can fix this if the user account is not an
administrator. Then the proper thing to do is:
1. Log on as administrator
2. Locate the desktop folder for the user account, right
click, select properties, go to security.
3. Uncheck "Inherit...", choose "copy", then click
the "Owner" tab on the same dialog. Reassign ownership of
this folder to the administrators group. Click "Apply".
4. Close that dialog to return to the security properties
again. Select the user, and uncheck "Write". Make sure
that "Read", "Read and Execute" and "List Folder Contents"
are checked.
This posting is provided "AS IS" with no warranties, and
confers no rights.
>-----Original Message-----
>Is there anyway to disable the creation or functionality
>of new shortcuts on the desktop? Or remove the option to
>create them from the right click context menu?
>.
>