Re: Start Menu/Taskbar Security
From: Wesley Vogel (123WVogel955_at_comcast.net)
Date: 10/06/05
- Next message: David H. Lipman: "Re: UnSpyPC and WareOut - now nothing works and cannot find anythi"
- Previous message: Wesley Vogel: "Re: Userenv error LATELY anybody ?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 5 Oct 2005 18:42:06 -0600
You can use the Group Policy editor (Gpedit.msc) under the following
location to configure Start menu features:
User Configuration\Administrative Templates\Start Menu and Taskbar
Note: Except when noted, all of these registry settings are under the
following registry key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Policies\Explorer
The registry entries are DWORD values. A value of 1 is enabled, and a value
of 0 is disabled.
Policy: Remove Run item from Start Menu
Description: Removes the ability to execute programs from the Run option on
the Start menu, Task Manager, or by pressing Win key + R. Also removes the
corresponding checkbox from the Start menu customization CPL.
Registry Value: "NoRun"
Policy: Remove Run item from Start Menu
[[Allows you to remove the Run command from the Start menu, Internet
Explorer, and Task Manager.
If you enable this setting, the following changes occur:
(1) The Run command is removed from the Start menu.
(2) The New Task (Run) command is removed from Task Manager.
(3) The user will be blocked from entering the following into the Internet
Explorer Address Bar:
--- A UNC path: \\<server>\<share>
---Accessing local drives: e.g., C:
--- Accessing local folders: e.g., \temp>
Also, users with extended keyboards will no longer be able to display the
Run dialog box by pressing the Application key (the key with the Windows
logo) + R.
If you disable or do not configure this setting, users will be able to
access the Run command in the Start menu and in Task Manager and use the
Internet Explorer Address Bar.
Note:This setting affects the specified interface only. It does not prevent
users from using other methods to run programs.
Note: It is a requirement for third-party applications with Windows 2000 or
later certification to adhere to this setting.]]
-- Hope this helps. Let us know. Wes MS-MVP Windows Shell/User In news:0364654C-5B78-418A-BFA0-2FB60BD846C8@microsoft.com, sierrajohn2 <sierrajohn2@discussions.microsoft.com> hunted and pecked: > Hi, > > In Windows 98SE By Using The System Policy Editor, It Was Possible To > Make The "run" Command Unavailable And Various Items On The Start > Menu/All Programs Menu, And The Control Panel, Unavailable Or > Unmodifiable By Certain Users Under "Family Login". How And Where Do I > Accomplish The Same Thing In The Windows XP Pro (SP2) "Guest" Account, > Or ANY Other Account For That Matter? > -- > John A. Dixon > Sierra Data Services > A Powerware Power Alliance Member > Authorized Reseller For: > Microsoft Products > ESET NOD32 Anti-Virus > Golden Bow''s VOPT > Smart Strip Power Strips > Seagate Drives
- Next message: David H. Lipman: "Re: UnSpyPC and WareOut - now nothing works and cannot find anythi"
- Previous message: Wesley Vogel: "Re: Userenv error LATELY anybody ?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|