Desktop Re-Direction Solution

Hi All

I have been asked by my company to provide a solution for the following
scenario.

I need to lock down approx 2000 users, on their PC using group policy etc. I
have assigned start menu re-direction + additional group policies. Each user
has a roaming profile with a 10mb limit. I have also been asked to stop them
from saving items on their desktops so I have applied desktop re-direction. I
do however have an issue, as they current data is being migrated from a free
for all area where they are millions of different login scripts to a single
mapped drive storage area. I need the users to be able to create shortcuts on
their desktops but nothing else.

Does anyone know of a way of them being able to do this? Is it a case that I
can just use Filescreening with Windows 2003 R2 and stop them from being able
to save anything on their desktops but LNK files. Obviously I would remove
the desktop re-direction. Their roaming profiles are going to be stored on a
netapps if that makes any difference.

Thanks in advance
James

 

Bazola <Bazola@discussions.microsoft.com> wrote:
> Hi All
>
> I have been asked by my company to provide a solution for the
> following scenario.
>
> I need to lock down approx 2000 users, on their PC using group policy
> etc. I have assigned start menu re-direction + additional group
> policies. Each user has a roaming profile with a 10mb limit. I have
> also been asked to stop them from saving items on their desktops so I
> have applied desktop re-direction. I do however have an issue, as
> they current data is being migrated from a free for all area where
> they are millions of different login scripts to a single mapped drive
> storage area. I need the users to be able to create shortcuts on
> their desktops but nothing else.
>
> Does anyone know of a way of them being able to do this? Is it a case
> that I can just use Filescreening with Windows 2003 R2 and stop them
> from being able to save anything on their desktops but LNK files.
> Obviously I would remove the desktop re-direction. Their roaming
> profiles are going to be stored on a netapps if that makes any
> difference.
>
> Thanks in advance
> James

I don't know that this is possible, although I'd love to know if it is.
What's the reason you don't just redirect Desktop to
\\server\users\%username%\desktop (presuming you're redirecting My Docs to
\\server\users\%username%\My Documents and so forth). As long as the data is
on the server does it really matter whether it's in their Desktop folder or
their My Documents folder?

I would redirect App Data, Desktop, and My Documents. I don't redirect Start
Menu because not all my workstations are 100% identical when it comes to
software loads, but your mileage may vary. I also don't limit profile size,
because when I redirect all that, the profile is unlikely to get large
anyway.

I don't really understand what you mean when you write "current data is
being migrated from a free for all area where they are millions of different
login scripts to a single mapped drive storage area." Mapped drives really
don't have anything to do with this.