Jump to content

Windows 10 Desktop Lock

ChrisLoudon

Hi guys,

 

I have a number of PCs used for business use across a couple of sites and I would like to stop the users from being able to save files (or anything for that matter) to the desktop.

 

Does anyone know if / how this can be done?

 

I use OneDrive to manage all of my business related files and it is so frustrating to go hunting for something only to find either the file is stored locally on someone's desktop or they have copied the file to their desktop leaving an out-of-date version on OneDrive.

 

Cheers

Bedroom PC - Lian-Li O11 XL Evo - Intel Core i5 13600k @ 5.4P / 4.4EGhz -  MSI Pro-A Wifi Z790 Mobo DDR5 - 32GB Ram - Gigabyte RTX 4090 - 1TB Samsung 990Pro NVMe - Corsair HX1200i PSU - Dual Custom Loop Cooling - GPU cooled with EK Quantum Surface S240 + EK Quantum Surface P360M X-Flow Rads - CPU cooled with EK Quantum Surface X360M Rad

 

Living Room PC - Hyte Y60 - Intel Core i9 9900k @ 5Ghz -  MSI Meg Ace Z390 Mobo - 16GB Ram - Palit RTX 3080ti - 256GB Samsung NVMe - Corsair AX850 PSU - CPU + GPU cooled with Hyte Y60 Corner Distro Plate - EK Coolstream S120 + EK Quantum Surface S360 + EK Quantum Surface X240M

 

Extension PC - Lian Li o11 Dynamic - Intel Core i7 8086k @ 5.1Ghz -  Gbyte Z390 I Aorus Pro Wifi Mobo - 16GB Ram - EVGA RTX 2080ti - 256GB Samsung NVMe - EVGA B5 850W PSU - CPU + GPU cooled with dual EKWB 360 Rads + G1 side EKWB distro plate.

 

Office - Thermaltake Tower 100 - Intel Core i7 8700K @ 5.1Ghz - Gbyte Z390 I Aorus Pro Wifi Mobo - 16GB Ram - EVGA GTX 1080ti - 256GB Samsung NVMe - EVGA B5 850W PSU - CPU + GPU cooled with dual EK Quantum Surface P120M Rads + Barrow 3-in-1 Block, Res & Pump.

 

Annex - Corsair 250D - Intel Core i7 3770k - Asus P8Z77 I Delux Mobo - 16GB Ram - EVGA GTX 980ti - 256GB Corsair SSD - BeQuiet P11 750 PSU - CPU cooled with EK Coolstream S240 + S120 Rads + EK Pump / Res Combo

 

Office - Corsair 280X - Intel Core i7 4790k - Asrock H97M ITX Mobo  - 16GB Ram - EVGA GTX 980 - Corsair SFXL600 PSU - CPU + GPU cooled with triple EK Coolstream S240s + EK Pump / Res Combo

 

NAS PC - Fractal Node 804 - Intel Core i7 3770k - Asus P8Z77-M Mobo - 16GB Ram - MSI GTX 1660 Ventus - Corsair AX850 PSU - Unraid 15TB Storage Server

 

Living Room AV Setup 5.1.4 - Yamaha RX-A2060 - 2 x B&W CM9s2 - 2 x Monitor Audio FX Silvers - 4 x B&W CCM665s - B&W CMCs2 - SVS SB13 Ultra - LG OLED65C1

 

Extension AV Setup - Sonos ARC + Sub (Gen 3) - LG OLED65C6V + Yamaha RX-A1070 - 5 x Monitor Audio C265s (2 Zones)

 

Bedroom AV Setup - Yamaha WXC-50 - 2 x B&W CM1s - Rel Quake - LG OLED42C2.

Link to comment
Share on other sites

Link to post
Share on other sites

GPO/Local Group Policy:

 

User Configuration > Administrative Templates > Desktop > Hide and Disable All Items on the Desktop

 

EDIT: To be clear, this doesn't outright prevent them from saving to their desktop, but it does stop them from dragging things to it outside of the desktop folder in file explorer. To stop them outright, you'd need to edit the permissions to make it so they don't have write or modify access to %userprofile%\desktop

 

You can configure the permissions through a computer policy: Computer Configuration > Policy > Windows Settings > Security Settings > File System and set the permissions for %userprofile%\desktop

Link to comment
Share on other sites

Link to post
Share on other sites

24 minutes ago, Oshino Shinobu said:

GPO/Local Group Policy:

 

User Configuration > Administrative Templates > Desktop > Hide and Disable All Items on the Desktop

Thanks but is there a way to keep the 'default' icons like recycle bin, this PC and the user folder?

 

I just want to stop the user from using the desktop as a 'save location' for anything.

 

Cheers

Bedroom PC - Lian-Li O11 XL Evo - Intel Core i5 13600k @ 5.4P / 4.4EGhz -  MSI Pro-A Wifi Z790 Mobo DDR5 - 32GB Ram - Gigabyte RTX 4090 - 1TB Samsung 990Pro NVMe - Corsair HX1200i PSU - Dual Custom Loop Cooling - GPU cooled with EK Quantum Surface S240 + EK Quantum Surface P360M X-Flow Rads - CPU cooled with EK Quantum Surface X360M Rad

 

Living Room PC - Hyte Y60 - Intel Core i9 9900k @ 5Ghz -  MSI Meg Ace Z390 Mobo - 16GB Ram - Palit RTX 3080ti - 256GB Samsung NVMe - Corsair AX850 PSU - CPU + GPU cooled with Hyte Y60 Corner Distro Plate - EK Coolstream S120 + EK Quantum Surface S360 + EK Quantum Surface X240M

 

Extension PC - Lian Li o11 Dynamic - Intel Core i7 8086k @ 5.1Ghz -  Gbyte Z390 I Aorus Pro Wifi Mobo - 16GB Ram - EVGA RTX 2080ti - 256GB Samsung NVMe - EVGA B5 850W PSU - CPU + GPU cooled with dual EKWB 360 Rads + G1 side EKWB distro plate.

 

Office - Thermaltake Tower 100 - Intel Core i7 8700K @ 5.1Ghz - Gbyte Z390 I Aorus Pro Wifi Mobo - 16GB Ram - EVGA GTX 1080ti - 256GB Samsung NVMe - EVGA B5 850W PSU - CPU + GPU cooled with dual EK Quantum Surface P120M Rads + Barrow 3-in-1 Block, Res & Pump.

 

Annex - Corsair 250D - Intel Core i7 3770k - Asus P8Z77 I Delux Mobo - 16GB Ram - EVGA GTX 980ti - 256GB Corsair SSD - BeQuiet P11 750 PSU - CPU cooled with EK Coolstream S240 + S120 Rads + EK Pump / Res Combo

 

Office - Corsair 280X - Intel Core i7 4790k - Asrock H97M ITX Mobo  - 16GB Ram - EVGA GTX 980 - Corsair SFXL600 PSU - CPU + GPU cooled with triple EK Coolstream S240s + EK Pump / Res Combo

 

NAS PC - Fractal Node 804 - Intel Core i7 3770k - Asus P8Z77-M Mobo - 16GB Ram - MSI GTX 1660 Ventus - Corsair AX850 PSU - Unraid 15TB Storage Server

 

Living Room AV Setup 5.1.4 - Yamaha RX-A2060 - 2 x B&W CM9s2 - 2 x Monitor Audio FX Silvers - 4 x B&W CCM665s - B&W CMCs2 - SVS SB13 Ultra - LG OLED65C1

 

Extension AV Setup - Sonos ARC + Sub (Gen 3) - LG OLED65C6V + Yamaha RX-A1070 - 5 x Monitor Audio C265s (2 Zones)

 

Bedroom AV Setup - Yamaha WXC-50 - 2 x B&W CM1s - Rel Quake - LG OLED42C2.

Link to comment
Share on other sites

Link to post
Share on other sites

2 minutes ago, ChrisLoudon said:

Thanks but is there a way to keep the 'default' icons like recycle bin, this PC and the user folder?

 

I just want to stop the user from using the desktop as a 'save location' for anything.

 

Cheers

You'd need to restrict user permissions to the desktop to read only. 

 

You can configure the permissions through a computer policy: Computer Configuration > Policy > Windows Settings > Security Settings > File System and set the permissions for %userprofile%\desktop

Link to comment
Share on other sites

Link to post
Share on other sites

1 minute ago, Oshino Shinobu said:

You'd need to restrict user permissions to the desktop to read only. 

 

You can configure the permissions through a computer policy: Computer Configuration > Policy > Windows Settings > Security Settings > File System and set the permissions for %userprofile%\desktop

Nice one, thanks.

Bedroom PC - Lian-Li O11 XL Evo - Intel Core i5 13600k @ 5.4P / 4.4EGhz -  MSI Pro-A Wifi Z790 Mobo DDR5 - 32GB Ram - Gigabyte RTX 4090 - 1TB Samsung 990Pro NVMe - Corsair HX1200i PSU - Dual Custom Loop Cooling - GPU cooled with EK Quantum Surface S240 + EK Quantum Surface P360M X-Flow Rads - CPU cooled with EK Quantum Surface X360M Rad

 

Living Room PC - Hyte Y60 - Intel Core i9 9900k @ 5Ghz -  MSI Meg Ace Z390 Mobo - 16GB Ram - Palit RTX 3080ti - 256GB Samsung NVMe - Corsair AX850 PSU - CPU + GPU cooled with Hyte Y60 Corner Distro Plate - EK Coolstream S120 + EK Quantum Surface S360 + EK Quantum Surface X240M

 

Extension PC - Lian Li o11 Dynamic - Intel Core i7 8086k @ 5.1Ghz -  Gbyte Z390 I Aorus Pro Wifi Mobo - 16GB Ram - EVGA RTX 2080ti - 256GB Samsung NVMe - EVGA B5 850W PSU - CPU + GPU cooled with dual EKWB 360 Rads + G1 side EKWB distro plate.

 

Office - Thermaltake Tower 100 - Intel Core i7 8700K @ 5.1Ghz - Gbyte Z390 I Aorus Pro Wifi Mobo - 16GB Ram - EVGA GTX 1080ti - 256GB Samsung NVMe - EVGA B5 850W PSU - CPU + GPU cooled with dual EK Quantum Surface P120M Rads + Barrow 3-in-1 Block, Res & Pump.

 

Annex - Corsair 250D - Intel Core i7 3770k - Asus P8Z77 I Delux Mobo - 16GB Ram - EVGA GTX 980ti - 256GB Corsair SSD - BeQuiet P11 750 PSU - CPU cooled with EK Coolstream S240 + S120 Rads + EK Pump / Res Combo

 

Office - Corsair 280X - Intel Core i7 4790k - Asrock H97M ITX Mobo  - 16GB Ram - EVGA GTX 980 - Corsair SFXL600 PSU - CPU + GPU cooled with triple EK Coolstream S240s + EK Pump / Res Combo

 

NAS PC - Fractal Node 804 - Intel Core i7 3770k - Asus P8Z77-M Mobo - 16GB Ram - MSI GTX 1660 Ventus - Corsair AX850 PSU - Unraid 15TB Storage Server

 

Living Room AV Setup 5.1.4 - Yamaha RX-A2060 - 2 x B&W CM9s2 - 2 x Monitor Audio FX Silvers - 4 x B&W CCM665s - B&W CMCs2 - SVS SB13 Ultra - LG OLED65C1

 

Extension AV Setup - Sonos ARC + Sub (Gen 3) - LG OLED65C6V + Yamaha RX-A1070 - 5 x Monitor Audio C265s (2 Zones)

 

Bedroom AV Setup - Yamaha WXC-50 - 2 x B&W CM1s - Rel Quake - LG OLED42C2.

Link to comment
Share on other sites

Link to post
Share on other sites

-> Moved to Windows

^^^^ That's my post ^^^^
<-- This is me --- That's your scrollbar -->
vvvv Who's there? vvvv

Link to comment
Share on other sites

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×