Re: Deny windows explorer from users

Hi,

Raigo77@xxxxxxxxxxxxx schrieb:
> How to deny Windows Explorer from users, using AD group policy?

Change the Shell, the user is working with. So that the
explorer.exe is no startet to create his user environment.

User config\adm templ\system
"userdefined shell"

(sounds like this if I translate it from my german version ...)

Take a look at nu2menu. It uses a selfmade startmenu
in XML format. After that you can try what happens after
you deny explorer.exe with a HASH based policy ...
I never tried what happens to all the "file open/close"
menus in office if you deny explorer.exe

But I guess, using a different shell will help a lot.

Mark
--
Mark Heitbrink - MVP Windows Server
Homepage: www.gruppenrichtlinien.de
W2K FAQ : http://w2k-faq.ebend.de
PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.

.

Relevant Pages

  • RE: Custom Shell or Exploror based shell
    ... Add Group Policy Object Editor ... Interface" shell. ... Now I am trying to lock down the single user without limiting ... I will probably use Manual Reseal Technique - install embedded and ...
    (microsoft.public.windowsxp.embedded)
  • Re: Locking Down TS Sessions
    ... On the Security tab of the loopback "lockdown" GPO you can check the Deny ... "Apply Group Policy" for Domain Admins. ... to be running some other software that the Administrator will have to ...
    (microsoft.public.windows.terminal_services)
  • Re: Group Policy - Locked myself out
    ... > 2) What is a Deny and how do I set one, ... >>Microsoft MVP ... >>> I set the Group Policy to lockout certain features (eg. ... >>> Control Panel, Snap-Ins, etc), and acidentally locked my ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Best Way to Block user or computer from receiving GP
    ... Use of security group filtering (including Deny) leads to ... restructure of OUs (think of mobile devices - scatter them ... Group Policy 1 ... Group Policy 1 (deny Team Leads) ...
    (microsoft.public.windows.group_policy)
  • Windows XP for untrusted users
    ... computers and the user logons they use are currently members of Active ... So far as I said I've used group policy, ... shell such as blackbox for windows and finally using no shell and configuring ...
    (microsoft.public.windowsxp.security_admin)