You might want to consider changing file permissions on the user's hard drive then. I assume that they're relagated to some role on the desktop other than at the local Administrator level? If so, it would be trivial to block them out of write permisson on the C: (or whatever local hard drive is called) and so on. Also if you're doing Roaming Profiles then you can still have them store stuff on the Desktop, which will then be sync'ed back to the server. The wait times are a lot less now thanks to mobsync.exe only moving across changed files (a la rsync). Have your network admin look into this; and uhh if you are the network admin, well maybe consider writing the 70-270 MS exam (Windows XP). :-)