Hi Robert
We have a generic user (p3rtp) with restricted access. This user owns the preference files in their home directory, they are set read only for the pinnacle group.
Then when setting up a new user we use these lines in a bash script (which is fed with $1 as the new users login name):
ln -s /home/p3rtp/Pinnacle.SimPreferences_14.0 /home/$1/
ln -s /home/p3rtp/Pinnacle.AtlasPreferences_14.0 /home/$1/
ln -s /home/p3rtp/Pinnacle.Preferences_14.0 /home/$1/
ln -s /home/p3rtp/Pinnacle.IMRTPreferences_14.0 /home/$1/
This way Preferences are identical for all users and are locked down.
Kind regards
Gary