With domain controller ( 2019 ) GPO I want to prevent users from copying files to desktop

Question

With domain controller ( 2019 ) GPO I want to prevent users from copying files to desktop
User : Windows 10 Pro

Answer 1

Hi,
Based on my understanding, if you want to prevent users from copying files to desktop, we have to restrict the write access on the desktop.
To do this, we can use the group policy.

1. Create folder redirection for users.
   A.Create shared folder for desktop redirection. Shared permission: give everyone the full control permission. Ntds Give users read and write permission.
   B. Create a Group Policy Object, link it to the OU which containing the user objects. Go toUser Configuration > Policy > Windows Settings > Foler Redirection >Desktop
   
2. Update the group policy by log off and login one or 2 times.
3. Change the shared permission on the folder we created before
   Change the full control permission to read permission only
4. Then users can't write anything to the desktop.