I have two Windows 2012 R2 Domain Controllers and will be implementing 7 Windows 2008 R2 remote desktop servers once their setup and testing is complete (I have one built now that is my test server). I've set up a group policy that redirects the users' My Documents, Music, Pictures, Videos, and Downloads folders to a file server I've built running Windows 2012. The problem I'm having is removing access to the Public Libraries - C:\users\public\documents, music, downloads, etc. - as I don't want anybody to have the ability to save to the local machine. With my test user I know that I can right click My Documents, select the public folder, then click remove for each of the five public folders I don't want them to have access to but I'm looking for a better solution as I don't want to have to remove all 5 folders for all 150+ users manually.
I've looked through the GPOs and searched Google and Server Fault and this doesn't appear to be anything that I can do via group policy. I've started looking into logon scripts but I'm not sure where to begin and I've seen some complaints that the logon scripts simply hide the folders from the navigation panel while leaving them as a usable save location.
I'm sure there is something I'm overlooking somewhere and I hope that you guys may be able to provide some guidance.