Restrict Startup

[Walter Rodrigues]

Would like to know if there is a Group Policy to restrict
users to access Startup. This start up is from START --

PROGRAMS --> STARTUP

Need to restrict users to add or delete programs from
this STARTUP field.

Any help....

 

[Jerold Schulman]

Would like to know if there is a Group Policy to restrict
users to access Startup. This start up is from START --

Need to restrict users to add or delete programs from
this STARTUP field.

Any help....

Simply set deny delete and deny write access to the users and "all users"
startup folder.


Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com

 

[JHayes]

Simply set deny delete and deny write access to the users and "all
users" startup folder.


Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com

Jerold,

Would this also prevent users from using drag & drop on the startmenu
itself (not the folder) to add items to 'startup'? I think it should,
but I'm curious.

There is a gp setting to deny changes to the taskbar and startmenu* that
would prevent that, but you shouldn't have to use it if you set the
folder permissions right?

JHayes

*/user config/admin template/startmenu & taskbar/disable changes to
taskbar and startmenu settings

 

[Buz [MSFT]]

Hello,

Restricting access to the Startup folder would not prevent users from using
drag & drop on the startmenu.

The Startup folder is a system folder, anything in this folder will start
automatically when the computer is restarted.

Restricting changes to the Start menu is different than just restrciting
access to one specific folder on the Start Menu (Startup)

If you enable the deny changes to the taskbar and startmenu policy you
shouldn't have to make the permissions change on the Startup folder though.



Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

 

[JHayes]

Hello,

Restricting access to the Startup folder would not prevent users from
using drag & drop on the startmenu.

The Startup folder is a system folder, anything in this folder will
start automatically when the computer is restarted.

Restricting changes to the Start menu is different than just
restrciting access to one specific folder on the Start Menu (Startup)

If you enable the deny changes to the taskbar and startmenu policy you
shouldn't have to make the permissions change on the Startup folder
though.



Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no
rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

hmmmmmm, it pays to be curious.

I have the 'disable changes to taskbar and startmenu settings' policy
enabled. I know that this used to prevent users from using drag & drop
on the start menu, however, when I checked it just now I find that my
users can use drag & drop on the startmenu.

gpresult shows the GPO with this policy is being applied and everything
else seems to be working. Several updates have been applied since I last
checked, so maybe something in a recent update caused this. I'm at a
loss to explain how else it would have changed since I haven't changed
any of the policies recently. Any ideas?

It's not a big issue since the only reason I had that set was to keep
people from accidentally dragging items from the startmenu out to the
desktop, but it makes me scratch my head and wonder what happened.


JHayes

 

[JHayes]

Hello,

Restricting access to the Startup folder would not prevent users from
using drag & drop on the startmenu.

The Startup folder is a system folder, anything in this folder will
start automatically when the computer is restarted.

Restricting changes to the Start menu is different than just
restrciting access to one specific folder on the Start Menu (Startup)

If you enable the deny changes to the taskbar and startmenu policy you
shouldn't have to make the permissions change on the Startup folder
though.



Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

ahhh, nevermind. now I see 'disable drag-and-drop ...on the startmenu'
just above it. I still don't think I had that set before and I know that
users could not use drag & drop on the startmenu.

meh. I've been wrong a few times before.

JHayes