Group policy doesn't stop desktop icons moving

[jatkinson]

I cannot find a way to set up a roaming profile for a group of users but prevent them from moving the icons around on the desktop. I have used GPOs to lock down most of the desktop/start menu but without making the profiles folder read-only (which gives a roaming profile error when the user logs out) I cannot see a way to do this.

Anyone come across this before or have an idea to prevent it?

 

[emaybee]

Do you really want roaming profiles or mandatory profiles?

 

[jatkinson]

Maybe some details of the difference may help me decide. I sort of get what mandatory is but am discovering that things aren't as simple as Microsoft would like us to believe, for example how can I allow my users to roam if they have to have software installed on a PC locally? How can I have a standard desktop when some users have Word XP and some Word 2000 which by default install to different folders?

I suppose I'm learning what you guys have, that the more you look at AD, group policy and roaming profiles the more difficult it is to decide one way or the other which is best.