I tried to reduce the need for administrative privs on Windows 10 domain members. One common action people want to do is to delete desktop icons from the shared public desktop (because of stupid software installer). So I added a Local group where I add the owner users (kind of similar to power users) and add that group with a “delete allow” ACL entry on the public desktop folder. This works (somewhat, you have to open the folder and can’t delete the icons directly on your desktop but it is a alternative for this question) but the ACE seems to be reset regularly.
Seems like something reset the folder permissions and I am not sure what it is. We dont think it’s a group policy.. at least not intentional. Is there a permission template in Windows for that folder to adjust as well? (And what triggers its application?)
