I am in a school environment where we do not allow students to access the C drive. We also redirect students “My Documents” folder to a network file storage. The computers are all connected to our domain and students are loggin in with domain accounts. We are in the process of converting to windows 7 and found that when a student tries to access their “My Documents” from their desktop they get an access denied message. We would like to keep students from accessing the C drive but allow them the use of the desktop short cut for their “My Documents”. We are pretty sure this is due to the fact that the “My Documents” folder is now a subfolder on the desktop. Is there settings in GPO to allow students access only to their “My Documents” folder?

NTFS and share permissions can be done manually without GPOs. Proceed like that: 1- Deny access for students to drive C 2- Block permissions inheritance on the My Document folder 3- Give students access to the My Document folder

To block inheritance, proceed like that: 1-Right click on the folder 2-Click on Properties 3-Click on Security 4-Click on Advanced 5-Click on Edit 6-Block inheritance

Thanks for the reply, I understand what you are saying about handling the permissions manually but we have over 14,000 students and over 5,000 desktop computers. The students still have access to their home folder (Z:drive) which is the same as their "My Documents" folder but hey have to access it in a diferent manner. We are just trying to avoid retraining the masses. Any sugestions would be very apreciated.

OK. We will proceed with another manner. Create a GPO and check if you are able to change NTFS permissions on the My Document folder with the use of: Computer configuration\Windows settings\Security settings\File system

I think you should perform a such thing with the use of a script. This link may help you: http://support.microsoft.com/kb/825751