Is there a way under Active Directory or elsewhere to ALWAYS prevent the home directory (or any of its content) of domain "user abc" to be copied locally on the C drive of the machine where he/she logs in from? Thanks for help!

1. You cannot prevent user from copying content of home to another repository. 2. You can audit and register activity (... and catch people while doing bad things.) 3. The simplest way how to prevent users from created folder in root (c:). Deny creation folder takes the precedence. (I put all user groups that I created into one and the deny applies to this group.) Regards Milos

The short answer is no, you cannot prevent this. Even if you restrict C: in its entirety, the user profile area is still going to be available to them. In the default case where there's no redirected folders, roaming or mandatory profiles, this basically means they can save/copy content to any location under their profile. cheers, Lain