Originally Posted by
Hellfury
I hate fucking users.
Company policy is pretty strict on that nothing work related is to be stored outside of servers (we handle a fair amount of sensitive information), but we have left the desktop and mydocuments/pictures etc. writeable, so people can use the computers for other stuff relatively freely. So logically, idiots save everything on the unencrypted harddrive.
Idiot user calls me up in the evening, screen borked "
Me: np, drop by my office tomorrow to pick up another laptop and I'll have yours sent in for repairs".
user: "Um, every single piece of work I did since starting in the company half a year ago is stored on the desktop."
me: "You were explicitly informed when you started here that that was a no-no.
User: "I know".
the technical aspect isn't a big deal, I can just plug in an external screen.
But it is so fucking unnecessary.
Anyone have experiences with blocking write access to desktop/mydocuments (or routing them to personal network share)?
[Almost all clients are Windows 10, the primary DCs are 2008 R2, but I have a pair of 2012 and 2016s too)