You could simply set the permissions to their desktop to read and execute only. That would be in their home directory of their account. Then they couldn’t save anything to the desktop period.

[QUOTE][u]Quote by: jeffh[/u][p]That didn’t work.
[/p][/QUOTE]

So if you did a send unix command via ARD admin to the machines in question and did this?

[code]

chmod 555 /Users//Desktop

[/code]

You may need to the add the -R switch if there are already tons of items on the desktop. That should make everything read and execute only for owner, group, and everyone.

You probably have to run that command post the user account logging in or being created since it copies the user account info form the user template and I am sure the user template gives ownership to that user of ~/Desktop.

I guess you could also try modifying the default user template.

For the common desktop you should be able to do under managed preferences for that group. You can disable them from changing it and then set it via the command line or push out a pref.

How many Macs are you managing? Are you just using OS X Server to manage all of them, and what versions of Client and Server are you running?

Well you are probably going to have to run a script that wild cards out the desktop out of each user’s home directory on the network share that holds the home directories. Test one out. Mount the share point with the home folders, pick out a user, and do the chmod command to the complete path to their desktop, then try to save something to their desktop.