How to make access to the desktop folder in a terminal session read-only (domain, GPO)?

Question

RDP

Good afternoon!
There is a task to forbid users on the terminal server 2008 R2 to create folders\files\shortcuts on a desktop and to delete them.
I can't figure out how to do it. At the moment, folder redirection to a hidden share is configured. All attempts to change the rights through GPO lead to nothing. Rather, they lead to the fact that redirection stops working.

Answer 1

Select Domain Users, issue Domain Guests. Will log in to a temporary profile.

Answer 2

Are you changing the permissions on the folder you're redirecting to? Is there a checkmark in the redirection settings for "Move the contents of the Desktop to a new location"?