Is it possible to attach a VMDK to all virtual desktops so that it is read-only for all users kind of a like a locally attached read only network drive? As stated, I do not think that you can do that.