So I need to make it so that users cannot save/edit/remove/modify the desktop items of a Windows XP pool. This means I cannot use the group policy item: disable all the desktop. I need the icons to be present, but unmodifable. Since it's Windows XP, there's not much of an option for the advanced group policy settings.
To further complicate it, we are using persona management to speed up the logons.
I've considered the following:
- Mandatory Profiles, didn't work out.
- Redirecting the Desktop Folder to a UNC Read Only Share. When I tried this with the Persona Management GPO setting, it didn't work. I could be wrong, but I think that using that setting requires read/write to the file location.
- Trying uniherit the folder permissions and make it read only with a login script.
So far I'm not having much luck. Any ideas out there? I suppose I could get creative and script it.