Re: Desktop Lockdown

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Chriss3 (noSpamHere_at_chrisse.se)
Date: 02/02/04 

Date: Mon, 2 Feb 2004 23:36:19 +0100

If you want to take advantage of a none built-in GPO setting you have to
write your own Administrative Template to change the registry enterys.

Add or remove an Administrative Template (.adm file):
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/proddocs/entserver/gptext_addtemplate.asp

HOW TO: Create Custom Administrative Templates in Windows 2000:
http://support.microsoft.com/default.aspx?scid=kb;en-us;323639

This will help you to configure any registry based setting within a Group
Policy, Hope that helps 

-- 
Best Regards,
Christoffer Andersson
No email replies please - reply in the newsgroup
If the information was help full, you can let me know at:
http://www.itsystem.se/employers.asp?ID=1
"DCA" <dpca001@hawaii.rr.com> skrev i meddelandet
news:t6ATb.3241$a65.2150@twister.socal.rr.com...
> I was hoping for something easier (like your previous advice on GPO).  A
reg
> hack or something along those lines.
>
>
> "Chriss3" <noSpamHere@chrisse.se> wrote in message
> news:eswvTTd6DHA.2540@TK2MSFTNGP11.phx.gbl...
> > Hello Mandatory Profiles may are an alternative for your organization?
> >
> > User Data and Settings Management:
> >
>
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/windowsserver2003/maintain/operate/user01.asp
> >
> > Here is a few policies you may can enable I think this is the closest we
> can
> > get with the built-in policy settings.
> >
> > User Configurations Node:
> >
> > Administrative Templates\Start Menu and Taskbar\
> > Remove and prevent access to the Shut Down command
> >
> > Administrative Templates\Start Menu and Taskbar\
> > Prevent changes to Taskbar and Start Menu Settings
> >
> > Administrative Templates\Start Menu and Taskbar\
> > Prevent grouping of taskbar items
> >
> > Administrative Templates\Desktop\
> > Prevent adding, dragging, dropping and closing the Taskbar's toolbars
> >
> > -- 
> > Regards,
> >
> > Christoffer Andersson
> > No email replies please - reply in the newsgroup
> > If the information was help full, you can let me know at:
> > http://www.itsystem.se/employers.asp?ID=1
> >
> > "DCA" <dpca001@hawaii.rr.com> skrev i meddelandet
> > news:zfzTb.5248$Sv1.66@twister.socal.rr.com...
> > > Thanks Chris,
> > >
> > > We don't want to hide the icons, just not have the user the ability to
> > move
> > > them around.  At the very least if, that's not possible, then if they
> log
> > > off and log back in, the desktop will "refresh" and icons will retain
> > their
> > > position.  Currently we have the desktop locked down so users cannot
add
> > or
> > > delete items to it.
> > >
> > >
> > > "Chriss3" <noSpamHere@chrisse.se> wrote in message
> > > news:eUJQOXb6DHA.2380@TK2MSFTNGP10.phx.gbl...
> > > > Hello DCA.
> > > >
> > > > There is a policy to prevent users from using the desktop at all.
> > > >
> > > > User Configuration\AdministrativeTemplates\Desktop\
> > > > Hide all icons on Desktop
> > > >
> > > > You may want to take use of Mandatory Profiles to prevent users from
> do
> > > any
> > > > changes at all to there profile.
> > > >
> > > > If you just want to lockdown the desktop and prevent users from
> creating
> > > > item on the desktop you have to modify ACL and prevent users from
> access
> > > the
> > > > Desktop Folder in there profile, may by redirect the Desktop out
side
> > the
> > > > profile with Folder Redirection within a Group Policy.
> > > >
> > > > -- 
> > > > Regards,
> > > >
> > > > Christoffer Andersson
> > > > No email replies please - reply in the newsgroup
> > > > If the information was help full, you can let me know at:
> > > > http://www.itsystem.se/employers.asp?ID=1
> > > >
> > > > "DCA" <dpca001@hawaii.rr.com> skrev i meddelandet
> > > > news:9UvTb.2845$ow4.914@twister.socal.rr.com...
> > > > > Trying to enforce a policy of not allowing changes on the user's
> > > desktop.
> > > > > We're looking to enable a policy that will not even allow users to
> > move
> > > > > icons around.  Thanks in advance.
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: NJ Server and California User
    ... I won't call you blind :-) ... You can't see the Terminal Services settings at all? ... always caused by using the wrong administrative template. ... But I can't find that policy within the group ...
    (microsoft.public.windows.terminal_services)
  • Re: MISSING THE GROUP POLICY
    ... > You can't see the Terminal Services settings at all? ... > always caused by using the wrong administrative template. ... > Vera Noest ...
    (microsoft.public.windows.terminal_services)
  • Re: MISSING THE GROUP POLICY
    ... You can't see the Terminal Services settings at all? ... always caused by using the wrong administrative template. ... Vera Noest ...
    (microsoft.public.windows.terminal_services)
  • Re: Security Policy Templates?
    ... An administrative template file. ... An .adm file defines the ... property page the Group Policy Object Editor will display to allow the ... location where the settings are stored. ...
    (microsoft.public.win2000.active_directory)
  • Re: Security Policy Templates?
    ... An administrative template file. ... An .adm file defines the ... property page the Group Policy Object Editor will display to allow the ... location where the settings are stored. ...
    (microsoft.public.windows.server.active_directory)