GP Help Please!

Hi

I am trying to lock down a PC and stop users from creating a folder on the desktop, it is currently locked down but there is a workaround

Open "Computer" then in Explorer window click Desktop, this then show on the menu bar "New folder"

Is there a way to remove this "New folder" button?

Can anyone help, I have had a Google but nothing is telling me how this specific restriction can be applied.

Cheers

Lee

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

Lee H

I have now simply amended folder permissions on each local PC "Deny Write" to Desktop, Documents and Downloads. This has achieved what I wanted but I am sure this could have been done via a VBS script,

So it is a domain account logging in but locally defined permissions denying write access to them 3 folders..

Does anyone have any VBS templates for changing folder permissions, although in my case it is just for 1 user,

Cheers

Lee

markulous

I'd be careful adding explicit deny rules to NTFS as it can make things pretty convoluted pretty quickly.

Isn't the add new folder button mapped to them through their Appdata folder? You can likely just create a gpo to remove that, but I thought there was a gpo already that blocks users from saving anything.