Limit Active Directory User Rights

[Guest]

Hi

I have a Server 2003 Standard with Active Directory, and I'm limiting 1
group to have the least amount of rights possible (ie. no right click, no
permissions to create shortcuts, no start menu contents).

The only problem I'm having is with the Programs folder in the start menu.
If a user dbl-clicks it, explorer opens up in the start folder. From here the
user can view all the mapped drives and even open Internet Explorer, even if
I disabled the path of explorer.

I have tried to redirect the folder to an non existing folder, but it worked
for a while then it reverted back to the start folder located on the
workstation.

I would be happy to disable the dbl-click on the Programs Folder under start
menu.

Thanks

 

[Lanwench [MVP - Exchange]]

Hi

I have a Server 2003 Standard with Active Directory, and I'm limiting
1 group to have the least amount of rights possible (ie. no right
click, no permissions to create shortcuts, no start menu contents).

The only problem I'm having is with the Programs folder in the start
menu. If a user dbl-clicks it, explorer opens up in the start folder.
From here the user can view all the mapped drives and even open
Internet Explorer, even if I disabled the path of explorer.

I have tried to redirect the folder to an non existing folder, but it
worked for a while then it reverted back to the start folder located
on the workstation.

I would be happy to disable the dbl-click on the Programs Folder
under start menu.

Thanks

I suggest you post in microsoft.public.windows.group_policy for more expert
help with this, as it's something you'd control in a policy rather than at
the desktop/client level (that's what the WinXP groups mainly cover).