Re: how to disable "new > shortcut"

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 04/07/05


Date: Thu, 7 Apr 2005 13:54:25 -0500

It seems like you are in a Group Policy Catch 22 for Windows 2000. Note that
you can also use Group Policy to restrict access to or hide a drive through
Windows Explorer if that would help. You will find it very difficult to
prevent users from browsing the drives as there seems to be many workarounds
including the command line if they can access that or Internet Explorer.
Ultimately you need to rely on ntfs permissions to restrict user access to
where they should not go and hopefully not make them local administrators or
power users on their computers. --- Steve

"Silly" <Silly@discussions.microsoft.com> wrote in message
news:635BE377-623C-4C98-99A6-9BCE32AC9232@microsoft.com...
>I tried to disable the whole context menu under User Config > Admin
>Template
>> Windows Comp > Windows Explorer by enabling the followings:
>
> - Remove file menu from Windows Explorer and
> - Remove Windows Explorer's default context menu
>
> What I am trying to do is to prevent user from being able to access the
> hard
> disk(s) by creating a shortcut to it (I already hide the drive(s)).
> However,
> I notice that if I enable the two policies above, there's no way for user
> to
> create a new folder in Windows 2000; in Windows XP, you have an option on
> the
> left hand panel, but not in Windows 2000. Any help on getting that work
> would be greatly appreciated. Thanks!
>
> "Steven L Umbach" wrote:
>
>> I don't know of a way to do such for the context menu selectively for
>> that
>> option. You can disable the whole context menu with Group Policy. For the
>> Desktop you can change the user's ntfs permissions for the desktop folder
>> so
>> that it is only read/list/execute and then they will not be able to
>> create
>> folders or shortcuts on their desktop. For a large group of users you
>> could
>> use a logon script to change the user's permissions using the %username%
>> variable. --- Steve
>>
>>
>> "Silly" <Silly@discussions.microsoft.com> wrote in message
>> news:AEDBFB21-58A0-4264-862B-9817D01AC383@microsoft.com...
>> > i'd like to know how to disable the creation of new shortcut in the
>> > context
>> > menu when you do a right click > new > folder/shortcut. thanks!
>>
>>
>>



Relevant Pages

  • Re: How do you all manage employee workstations? Looking for sugge
    ... 314886 Some Issues to Consider If Windows XP Users Have Roaming Profiles ... Folder Redirection is a User group policy. ... client computer will be saved in one server box. ...
    (microsoft.public.windows.server.sbs)
  • Re: How do you all manage employee workstations? Looking for suggestio
    ... 314886 Some Issues to Consider If Windows XP Users Have Roaming Profiles ... Folder Redirection is a User group policy. ... client computer will be saved in one server box. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Windows Update Error on XP 64bit: update is redirected from v6
    ... Antivir *usually* does not interfere with the installation of core ... Proxycfg settings WORKED. ... Microsoft Windows 2000 Operating System Group Policy Result tool ...
    (microsoft.public.windowsupdate)
  • Re: Windows Update Error on XP 64bit: update is redirected from v6
    ... Be sure you back up the registry if you decide to try the steps listed under 'Reset the default security provider in Windows XP '. ... [CallerId = AutomaticUpdates] ... Antivir *usually* does not interfere with the installation of core system updating components. ... Microsoft Windows 2000 Operating System Group Policy Result tool ...
    (microsoft.public.windowsupdate)
  • Re: Best way to lock down user profile on XP client?
    ... Templates\System\Don't run specified Windows applications] group policy to ... specified Windows applications] group policy. ... Using Software Restriction Policies to Protect Against Unauthorized Software ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)