desktop security - where is it?

[James W. Long]

Dear all:

I have looked at secpol.msc and gpedit.msc and its not in there unless I'm
blind.
I am looking for the {snapin} applet which allows me to limit desktop
functionality,
like hiding tabs in certain control panel applets, not allowing changes to
tcpip parms
and even the ability to lock down icon positions on the desktop. Also the
background is locked down.

I have seen it someplace before... but where? I remember being able
to checkbox all this stuff into total lockdown, some was, and now I need
to unlock a couple things but I dont find it again.

I am running Win2k clients, Win2k Server and Win2k Advanced Server. Any help
would be appreciated greatly.
Thank you,
James W. Long.

 

[Miha Pihler]

Hi James,

Start -> Run -> gpedit.msc -> Ok. Under User Configuration double click on
Administrative Templates -> Desktop -> ...

I hope this helps,

Mike

 

[James W. Long]

Dear Miha:

ok I found "disable changing wallpaper"
under Administrative Templates -> control panel ->display

but I still need

"disable being able to change position of desktop icons",

also, on desktop settings (to change the res) its not that
the tab is hidden, its that a change does not take effect.

where is that hiding?



Thank you,
James W. Long

 

[Miha Pihler]

Do you have active directory set up? If you set these settings in AD at what
level did you set them? Domain, OU or local policy? You should set it either
at Domain or OU level -- local policy will be overwritten by domain or OU
policy.

To prevent changes to e.g. resolution under Administrative Templates ->
Control Panel -> Display -> double click on "Hide Settings Tab" end select
Enable.

"disable being able to change position of desktop icons",

I don't think such policy exist, but you can
- use mandatory profiles
- use "Don't save settings on exit" under "Administrative Templates ->
Desktop -> ... "

Mike

 

[James W. Long]

Mike:

"disable being able to change position of desktop icons",

I don't think such policy exist, but you can.....

It definately exists, this is the bevior, I cant move a single icon,
on my DC.

I grab an icon, try to drag and drop it, but it snaps right back where it
was.

Thanks
James

 

[Dave]

right click on the desktop and check the 'arrange icons by' menu to see if
autoarrange is checked or one of the other maybe that does that.