World of EUC

I think there was a GPO to block it. But I thought it was all or nothing.

Yeah I remember a GPO setting, but can't finf it. My google-fu is bad atm :disappointed:

Try this <https://forflukesake.co.za/wp/group-policy-prevent-saving-to-desktop/>

It will lead you to what you are trying to do. <@UL5TCSW3D> I bet had some Ninja stuff on this.

Thanks Ray, looks good to me.  But I think handling on a file extension level is not possible at all.

You want to block users from saving to the Desktop, But allow them to save shortcuts?

Windows Server has some file share controls that you can use to prevent file types. Not sure if it's an allow or block list

The customer is asking for it :smile: But yes, that's the goal

<https://docs.microsoft.com/en-us/windows-server/storage/fsrm/file-screening-management|https://docs.microsoft.com/en-us/windows-server/storage/fsrm/file-screening-management>

That would do it. This would do it as well
<https://www.geursen.net/prevent-users-saving-items-on-the-citrixterminal-server-desktop/>

<@ULGR78LTW> Unfortunately no Windows Fileservers, Netapp only

Can you explain some of the Architecure? What is the profile solution you are using?

I assume you profiles are writing direclty to the Netapp CIFFS share you created?

Ah, that's actually a very interesting use case :thinking_face: You could build a simple solution using FileSystemWatch that would automatically delete (with notification) data saved to Desktop folder.

This is the way I did it, long ago <https://www.htguk.com/creating-locked-down-windows-2008-r2/>

See I knew <@UL5TCSW3D> would have this. He is the Profile Ninja and that is just a taste of the crazy stuff he does.

<@ULLH5JGFR> VDI with Horizon, currently Windows 7 ESU with (huge) roaming profiles. Currently PoC/Evaluation of Windows 10 with FSLogix. Customer is in public sector, all documents must reside in DMS so thats the reason for this requirement. Redirecting the Desktop out of the Container isn't sufficent as well, since users have the need to create custom shortcuts, they need to be persistent. Customer also wants no Folder Redirections and no Home drives. Everything is special there :dizzy_face: