Hi again,
I have a XPe Image with 2 Users. Administrator with explorer shell and
a user with a custom shell. Since the custom shell is using the file
select dialog i used a local group policy to lock down the
possibilities. Eg. i disabled the context menu and starting the task
manager in the security dialog etc.
To make sure these rules only apply to the User account and not the
administrator i used a trick to disallow read permission for the
"Windows\system32\GroupPolicy" folder. I've set all the policies how i
want them and now want to find an easy way to "install" these in a
freshly created XPe image (post FBA, i assume there is no way to
integrate this in the FBA, or is there?).
Is it enough to copy all the contents from the above GroupPolicy
folder and set the permissions (disable read for administrators). It
would be nice if a script could do that. Thinking about it, if its
that simple the FBA should be able to handle it, shouldn't it.
I hope someone can help a XPe novice.
Regards,
Nikolaus Demmel
|