How to prevent user from writing to desktop without GPMC.msc and pop-up?

Question

I am trying to prevent a specific user from adding files, etc. to their Desktop. However, everything online says I need to use Group Policy Management Controller. However, I am trying to do this on a local computer, and I get a pop-up that say I need a Domain User Account. From what I read, this is only available for servers or computers managing multiple computers (which sound like overkill).

I then tried to just edit the permission directly through Properties>Security and denying writing.

It works other than the fact that every time I open the Windows Explorer I get a pop-up that says You don't have permission to access this folder.

I don't want this pop-up every time the Windows Explorer opens. Is there a way to accomplish the same thing but without this pop-up?

Answer 1

I figured it out!

You can accomplish this by setting Advanced Permissions and turning off inheritance. Then you can set the Desktop's permission for that user to only apply to that folder. Then you can turn off writing.