G
Guest
How can I disble users being able to use Windows Explorer from a right click
on the start button using AD?
Is it possible?
on the start button using AD?
Is it possible?
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.
You should upgrade or use an alternative browser.
H
Herb Martin
Jonathan said:How can I disble users being able to use Windows Explorer from a right click
on the start button using AD?
Is it possible?
In some sense you CANNOT do this -- the Start button is PART of
Windows Explorer.
Windows Explorer runs the file browser, tool bar, start menus, and
the functionality of the desktop.
What are you really trying to accomplish?
G
Guest
Hi Herb,
Thanks for your quick reply - I am wanting to stop users of our EPOS GP from
accessing any prt of the system they only need to access the desktop where
there is a shortct to the POS software we use.
I caught a user browsingto the games becuase I had removed them from the
main menue rather than serving customers.
Does that explain it better? I have disabled most options to stop them
accessing most things but this is a huge loophole that gives users total
access to the system anyway.
Thanks for your quick reply - I am wanting to stop users of our EPOS GP from
accessing any prt of the system they only need to access the desktop where
there is a shortct to the POS software we use.
I caught a user browsingto the games becuase I had removed them from the
main menue rather than serving customers.
Does that explain it better? I have disabled most options to stop them
accessing most things but this is a huge loophole that gives users total
access to the system anyway.
Herb Martin said:Jonathan said:How can I disble users being able to use Windows Explorer from a right click
on the start button using AD?
Is it possible?
In some sense you CANNOT do this -- the Start button is PART of
Windows Explorer.
Windows Explorer runs the file browser, tool bar, start menus, and
the functionality of the desktop.
What are you really trying to accomplish?
--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
H
Herb Martin
pscyime said:Hi
can you not use NTFS file permissions and security groups to prevent
them accessing all but the folder/files needed ?
That and using Software Restriction Policies were going to be my
suggestions for such problems.
Also using Group Policy to remove access to the Start/RUN, TaskMgr,
RegEdit etc.
Software Restriction Policies aren't available in all OS versions but
Permissions work in every NT version with an NTFS drive.
Software Restriction Policies
http://www.microsoft.com/technet/pr...Ref/ad3b6293-4a22-46a5-a95b-7c50ca1fd1fb.mspx
M
Manny Borges
All good ideas, but if we want to be really draconian and expend minimal
effort I suggest a log on script pushed out through a GPO.
This script should kill the process for explorer and run the application in
question.
Basically like a terminal session that runs a program for its interface
instead of explorer.
I won't write it for you(since you probably get paid to do what you do) but
I will point you to a starting referances.
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/taskkill.mspx
Use the same GPO to disable all the other rights , like pull run out of the
security dialog box, yadda yadda yadda.
effort I suggest a log on script pushed out through a GPO.
This script should kill the process for explorer and run the application in
question.
Basically like a terminal session that runs a program for its interface
instead of explorer.
I won't write it for you(since you probably get paid to do what you do) but
I will point you to a starting referances.
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/taskkill.mspx
Use the same GPO to disable all the other rights , like pull run out of the
security dialog box, yadda yadda yadda.
Herb Martin said:pscyime said:Hi
can you not use NTFS file permissions and security groups to prevent
them accessing all but the folder/files needed ?
That and using Software Restriction Policies were going to be my
suggestions for such problems.
Also using Group Policy to remove access to the Start/RUN, TaskMgr,
RegEdit etc.
Software Restriction Policies aren't available in all OS versions but
Permissions work in every NT version with an NTFS drive.
Software Restriction Policies
http://www.microsoft.com/technet/pr...Ref/ad3b6293-4a22-46a5-a95b-7c50ca1fd1fb.mspx
D
Denis Wong @ Hong Kong
Hi Jonathan,
You can disable the right click on Start menu. However, other than this I
bet you have way too many settings to apply.
User Config\Administrative Templates\Start Menu and Taskbar\Remove access to
the context menus for the taskbar
"Hides the menus that appear when you right-click the taskbar and items on
the taskbar, such as the Start button, the clock, and the taskbar buttons.
This setting does not prevent users from using other methods to issue the
commands that appear on these menus."
br,
Denis
You can disable the right click on Start menu. However, other than this I
bet you have way too many settings to apply.
User Config\Administrative Templates\Start Menu and Taskbar\Remove access to
the context menus for the taskbar
"Hides the menus that appear when you right-click the taskbar and items on
the taskbar, such as the Start button, the clock, and the taskbar buttons.
This setting does not prevent users from using other methods to issue the
commands that appear on these menus."
br,
Denis
Jonathan said:Hi Herb,
Thanks for your quick reply - I am wanting to stop users of our EPOS GP from
accessing any prt of the system they only need to access the desktop where
there is a shortct to the POS software we use.
I caught a user browsingto the games becuase I had removed them from the
main menue rather than serving customers.
Does that explain it better? I have disabled most options to stop them
accessing most things but this is a huge loophole that gives users total
access to the system anyway.
Herb Martin said:Jonathan said:How can I disble users being able to use Windows Explorer from a right click
on the start button using AD?
Is it possible?
In some sense you CANNOT do this -- the Start button is PART of
Windows Explorer.
Windows Explorer runs the file browser, tool bar, start menus, and
the functionality of the desktop.
What are you really trying to accomplish?
--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
D
Denis Wong @ Hong Kong
Sorry I forgot to point out this is a group policy setting.
Jonathan said:Hi Herb,
Thanks for your quick reply - I am wanting to stop users of our EPOS GP from
accessing any prt of the system they only need to access the desktop where
there is a shortct to the POS software we use.
I caught a user browsingto the games becuase I had removed them from the
main menue rather than serving customers.
Does that explain it better? I have disabled most options to stop them
accessing most things but this is a huge loophole that gives users total
access to the system anyway.
Herb Martin said:Jonathan said:How can I disble users being able to use Windows Explorer from a right click
on the start button using AD?
Is it possible?
In some sense you CANNOT do this -- the Start button is PART of
Windows Explorer.
Windows Explorer runs the file browser, tool bar, start menus, and
the functionality of the desktop.
What are you really trying to accomplish?
--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
H
Herb Martin
This script should kill the process for explorer and run the application
in
Instead of killing it, then just make a specific process the shell.
--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
in
question.
Instead of killing it, then just make a specific process the shell.
--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
Manny Borges said:All good ideas, but if we want to be really draconian and expend minimal
effort I suggest a log on script pushed out through a GPO.
This script should kill the process for explorer and run the application in
question.
Basically like a terminal session that runs a program for its interface
instead of explorer.
I won't write it for you(since you probably get paid to do what you do) but
I will point you to a starting referances.
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/taskkill.mspx
Use the same GPO to disable all the other rights , like pull run out of the
security dialog box, yadda yadda yadda.
Herb Martin said:pscyime said:Hi
can you not use NTFS file permissions and security groups to prevent
them accessing all but the folder/files needed ?
That and using Software Restriction Policies were going to be my
suggestions for such problems.
Also using Group Policy to remove access to the Start/RUN, TaskMgr,
RegEdit etc.
Software Restriction Policies aren't available in all OS versions but
Permissions work in every NT version with an NTFS drive.
Software Restriction Policies
http://www.microsoft.com/technet/pr...Ref/ad3b6293-4a22-46a5-a95b-7c50ca1fd1fb.mspx
--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]