Allow non-admin users of workstations to delete files/icons from Desktop using Group Policy

Question

Hello,

I'd like to ask if there is possibility to allow non-admin users of computers that are joined to domain to delete files and icons from their desktops. We have ca. 100 workstations with Windows 10/11 and sometimes deleting items is quite time consuming. Can this be done using GPO or permissions must be set locally, on each computer?

Thanks in advance

Answer 1

Hello Piotr Czerwik,

Thank you for posting in Q&A forum.

Do you want only one domain user to do this? If so, and you have more users and they have their own machines, you can try:

1.Put those machines in this OU.

2.Create a GPO and link it to the above OU.

3.Edit the GPO as below (for example, if you have more users, you can add more entries in that GPO):

%SystemDrive%Users\t1\Desktop, give one domain user (such as user1) "read" and "delete subfolders and files" permissions on this desktop;

%SystemDrive%Users\t2\Desktop, give one domain user (such as user1) "read" and "delete subfolders and files" permissions on this desktop;

%SystemDrive%Users\t3\Desktop, give one domain user (such as user1) "read" and "delete subfolders and files" permissions on this desktop;

Run gpupdate /force or restart the machine to make GPO take effect.

I hope the information above is helpful.

If you have any questions or concerns, please feel free to let us know.

Best Regards,

Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.