I'm trying to setup some laptops will very limited access. All the user needs to be able to do is log in, join wifi, launch a VPN client and use remote desktop to access a remote machine. Nothing else is to be done on these computers. We will also have a locked down IE available so they can verify Internet connectivity and join wifi networks that require registration via a browser.
I have set up a group policy to restrict access to the C drive. It is successfully preventing the users from saving to the desktop and downloads folder, buy they can still save to the local Documents folder as if there was no restriction.
What else needs to be done to block saving files everywhere including the Documents folder?
I would prefer the the Documents folder and Windows Explorer icon shown on the task bar are not even displayed. I didn't see an option to hide those in the policy settings.
I have hidden most items from the user's desktop profile, but Explorer still shows and displays their documents folder even thought the network and local disk drive are not displayed.