All Users desktop, how to not allow deletion of shortcuts

I have placed shortcuts to programs in the all users desktop. I have
only allowed "Read and Execute", "List folder contents", and "Read"
in the Security Properties for "Everyone". When another user logs
onto the computer and deletes the shortcut from their desktop, it
deletes it for everyone.

How can I set it up where the shortcut stays, even if other users
can't delete it on their own desktop.

wrote:
I have placed shortcuts to programs in the all users desktop. I
have only allowed "Read and Execute", "List folder contents", and
"Read" in the Security Properties for "Everyone". When another
user logs onto the computer and deletes the shortcut from their
desktop, it deletes it for everyone.

How can I set it up where the shortcut stays, even if other users
can't delete it on their own desktop.

Stop using "Everyone".
Remove "Everyone"

Use the "Users" group and change the rights on the specific folder:

( C:\Documents and Settings\All Users\Desktop\ and/or C:\Documents and
Settings\All Users\Start Menu\ )

So that "System" and "Users" are the only two users/groups that have rights
*at all*. They should have Read/List/Execute only on the folder and all
files/folders beneath it.

That should do it - but remember - administrative rights *can* trump all
that. Don't make your users administrators.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html

wrote:
I have placed shortcuts to programs in the all users desktop. I
have only allowed "Read and Execute", "List folder contents", and
"Read" in the Security Properties for "Everyone". When another
user logs onto the computer and deletes the shortcut from their
desktop, it deletes it for everyone.

How can I set it up where the shortcut stays, even if other users
can't delete it on their own desktop.

Stop using "Everyone".
Remove "Everyone"

Use the "Users" group and change the rights on the specific folder:

( C:\Documents and Settings\All Users\Desktop\ and/or C:\Documents and
Settings\All Users\Start Menu\ )

So that "System" and "Users" are the only two users/groups that have rights
*at all*. They should have Read/List/Execute only on the folder and all
files/folders beneath it.

That should do it - but remember - administrative rights *can* trump all
that. Don't make your users administrators.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html