Lockdown Console?

[Guest]

Hey guys,

Is there any way to lockdown a console security wise. We don't want the
people who use these having access to the run menu, control panel etc.

I know in regular XP we use group policy editor? How can the same thing be
achieved in XPE? So that the administrators can see everything but the set
user account only has our app in the start menu?

Thanks for the help

 

[KM]

Mark,

If Custom Shell is acceptable for your device, this may be the best option as you have the control to specify what access level you
give to end user.

If you have to accomplish what you want to with Explorer Shell, here is a few hints for you:
- Look at the "User Interface Core" component setting
- Most of the UI locking options would be under
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] (e.g., "Start_ShowRun", etc.)
[HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] (e.g., "NoRun", "NoDrives", etc.)
[HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System] (e.g., "DisableTaskMgr"=dword:1, etc.)
[HKCU\Control Panel\don't load] (e.g., "appwiz.cpl"="No", etc.)
- Search this NG archive for Explorer Advance Policies. We have posted many registry settings regarding locking down the UI.
- Search Google for the subject on XP. Similar has been done on many different devices.