Server 2008 R2 – File Screening with wildcard in Path

Hi Guys,

We are setting up roaming profiles & Desktop folder redirection to a new 2008 R2 server for all our users. The roaming profiles will be pointing to a DFS namespace.

This will be the folder structure:
\\domain.local\DFS\Home\%username%\                                                                                         

Then underneath this will be the redirected folders. So for instance:

appdata
Desktop

My question is, if I wanted to disable certain files from being copied/run to the network Desktop folder – what is the best solution for this?

I would like to use File screening, but my understanding is that it can’t accept wildcard’s in the path, so I couldn’t have this as a file screen path: \\domain.local\DFS\Home\*\desktop, is there a work around for this?

Would I be better off using a software restriction group policy or even creating a new DFS namespace called \\domain.local\DFS\desktop\%username%\ and use File screening to block the required files for the whole desktop folder?

Any help/guidance would be greatly appreciated.