Disable Run Command and UNC Path

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

We disabled the run command in our GPO and now realizes that that disables
using UNC pathing in Windows Explorer. Is there any way around this?
 
Only way appears to be to disable or do not configure the Remove Run menu
from Start Menu setting.

User Configuration\Administrative Templates\Start Menu and Taskbar\
Remove Run menu from Start Menu

From gpedit.msc Remove Run menu from Start Menu Explain...
[[Allows you to remove the Run command from the Start menu, Internet
Explorer, and Task Manager.

If you enable this setting, the following changes occur:
(1) The Run command is removed from the Start menu.
(2) The New Task (Run) command is removed from Task Manager.
(3) The user will be blocked from entering the following into the Internet
Explorer Address Bar:
--- A UNC path: \\<server>\<share>
---Accessing local drives: e.g., C:
--- Accessing local folders: e.g., \temp>

Also, users with extended keyboards will no longer be able to display the
Run dialog box by pressing the Application key (the key with the Windows
logo) + R.

If you disable or do not configure this setting, users will be able to
access the Run command in the Start menu and in Task Manager and use the
Internet Explorer Address Bar.

Note: This setting affects the specified interface only. It does not prevent
users from using other methods to run programs.

Note: It is a requirement for third-party applications with Windows 2000 or
later certification to adhere to this setting.]]

<quote>
Help/Explain Text: Allows you to remove the Run command from the Start menu,
Internet Explorer, and Task Manager. If you enable this setting, the
following changes occur: (1) The Run command is removed from the Start menu.
(2) The New Task (Run) command is removed from Task Manager. (3) The user
will be blocked from entering the following into the Internet Explorer
Address Bar: --- A UNC path: \\\ ---Accessing local drives: e.g., C: ---
Accessing local folders: e.g., \temp> Also, users with extended keyboards
will no longer be able to display the Run dialog box by pressing the
Application key (the key with the Windows logo) + R. If you disable or do
not configure this setting, users will be able to access the Run command in
the Start menu and in Task Manager and use the Internet Explorer Address
Bar. Note:This setting affects the specified interface only. It does not
prevent users from using other methods to run programs. Note: It is a
requirement for third-party applications with Windows 2000 or later
certification to adhere to this setting.
<quote>
from...
Remove Run menu from Start Menu
http://www.boyce.us/gp/gpcontent.asp?ID=346

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
Wesley said:
Only way appears to be to disable or do not configure the Remove Run menu
from Start Menu setting.

User Configuration\Administrative Templates\Start Menu and Taskbar\
Remove Run menu from Start Menu

From gpedit.msc Remove Run menu from Start Menu Explain...
[[Allows you to remove the Run command from the Start menu, Internet
Explorer, and Task Manager.

If you enable this setting, the following changes occur:
(1) The Run command is removed from the Start menu.
(2) The New Task (Run) command is removed from Task Manager.
(3) The user will be blocked from entering the following into the Internet
Explorer Address Bar:
--- A UNC path: \\<server>\<share>
---Accessing local drives: e.g., C:
--- Accessing local folders: e.g., \temp>

Also, users with extended keyboards will no longer be able to display the
Run dialog box by pressing the Application key (the key with the Windows
logo) + R.

If you disable or do not configure this setting, users will be able to
access the Run command in the Start menu and in Task Manager and use the
Internet Explorer Address Bar.

Note: This setting affects the specified interface only. It does not prevent
users from using other methods to run programs.

Note: It is a requirement for third-party applications with Windows 2000 or
later certification to adhere to this setting.]]

<quote>
Help/Explain Text: Allows you to remove the Run command from the Start menu,
Internet Explorer, and Task Manager. If you enable this setting, the
following changes occur: (1) The Run command is removed from the Start menu.
(2) The New Task (Run) command is removed from Task Manager. (3) The user
will be blocked from entering the following into the Internet Explorer
Address Bar: --- A UNC path: \\\ ---Accessing local drives: e.g., C: ---
Accessing local folders: e.g., \temp> Also, users with extended keyboards
will no longer be able to display the Run dialog box by pressing the
Application key (the key with the Windows logo) + R. If you disable or do
not configure this setting, users will be able to access the Run command in
the Start menu and in Task Manager and use the Internet Explorer Address
Bar. Note:This setting affects the specified interface only. It does not
prevent users from using other methods to run programs. Note: It is a
requirement for third-party applications with Windows 2000 or later
certification to adhere to this setting.
<quote>
from...
Remove Run menu from Start Menu
http://www.boyce.us/gp/gpcontent.asp?ID=346

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
Valerie C said:
We disabled the run command in our GPO and now realizes that that disables
using UNC pathing in Windows Explorer. Is there any way around this?
 
Only way appears to be todisableor do not configure the RemoveRunmenu
from Start Menu setting.

User Configuration\Administrative Templates\Start Menu and Taskbar\
RemoveRunmenu from Start Menu

From gpedit.msc RemoveRunmenu from Start Menu Explain...
[[Allows you to remove theRuncommand from the Start menu, Internet
Explorer, and Task Manager.

If you enable this setting, the following changes occur:
(1) TheRuncommand is removed from the Start menu.
(2) The New Task (Run) command is removed from Task Manager.
(3) The user will be blocked from entering the following into the Internet
Explorer Address Bar:
--- A UNC path: \\<server>\<share>
---Accessing local drives: e.g., C:
--- Accessing local folders: e.g., \temp>

Also, users with extended keyboards will no longer be able to display theRundialog box by pressing the Application key (the key with the Windows
logo) + R.

If youdisableor do not configure this setting, users will be able to
access theRuncommand in the Start menu and in Task Manager and use the
Internet Explorer Address Bar.

Note: This setting affects the specified interface only. It does not prevent
users from using other methods torunprograms.

Note: It is a requirement for third-party applications with Windows 2000 or
later certification to adhere to this setting.]]

<quote>
Help/Explain Text: Allows you to remove theRuncommand from the Start menu,
Internet Explorer, and Task Manager. If you enable this setting, the
following changes occur: (1) TheRuncommand is removed from the Start menu.
(2) The New Task (Run) command is removed from Task Manager. (3) The user
will be blocked from entering the following into the Internet Explorer
Address Bar: --- A UNC path: \\\ ---Accessing local drives: e.g., C: ---
Accessing local folders: e.g., \temp> Also, users with extended keyboards
will no longer be able to display theRundialog box by pressing the
Application key (the key with the Windows logo) + R. If youdisableor do
not configure this setting, users will be able to access theRuncommand in
the Start menu and in Task Manager and use the Internet Explorer Address
Bar. Note:This setting affects the specified interface only. It does not
prevent users from using other methods torunprograms. Note: It is a
requirement for third-party applications with Windows 2000 or later
certification to adhere to this setting.
<quote>
from...
RemoveRunmenu from Start Menuhttp://www.boyce.us/gp/gpcontent.asp?ID=346

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

InValerie C <Valerie (e-mail address removed)> hunted and pecked:


We disabled theruncommand in our GPO and now realizes that that disables
using UNC pathing in Windows Explorer. Is there any way around this?- Hide quoted text -

- Show quoted text -

If I disable run will it still be available for the admin account?
Need to have access while denying to users.
 
How to apply local policies to all users except administrators in a
workgroup setting in Windows 2000
http://support.microsoft.com/kb/293655

HOW TO Apply Local Policies to All Users Except Administrators on Windows
Server 2003 in a Workgroup Setting
http://support.microsoft.com/kb/325351

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
Only way appears to be todisableor do not configure the RemoveRunmenu
from Start Menu setting.

User Configuration\Administrative Templates\Start Menu and Taskbar\
RemoveRunmenu from Start Menu

From gpedit.msc RemoveRunmenu from Start Menu Explain...
[[Allows you to remove theRuncommand from the Start menu, Internet
Explorer, and Task Manager.

If you enable this setting, the following changes occur:
(1) TheRuncommand is removed from the Start menu.
(2) The New Task (Run) command is removed from Task Manager.
(3) The user will be blocked from entering the following into the
Internet Explorer Address Bar:
--- A UNC path: \\<server>\<share>
---Accessing local drives: e.g., C:
--- Accessing local folders: e.g., \temp>

Also, users with extended keyboards will no longer be able to display
theRundialog box by pressing the Application key (the key with the
Windows logo) + R.

If youdisableor do not configure this setting, users will be able to
access theRuncommand in the Start menu and in Task Manager and use the
Internet Explorer Address Bar.

Note: This setting affects the specified interface only. It does not
prevent
users from using other methods torunprograms.

Note: It is a requirement for third-party applications with Windows 2000
or
later certification to adhere to this setting.]]

<quote>
Help/Explain Text: Allows you to remove theRuncommand from the Start
menu,
Internet Explorer, and Task Manager. If you enable this setting, the
following changes occur: (1) TheRuncommand is removed from the Start
menu. (2) The New Task (Run) command is removed from Task Manager. (3)
The user
will be blocked from entering the following into the Internet Explorer
Address Bar: --- A UNC path: \\\ ---Accessing local drives: e.g., C: ---
Accessing local folders: e.g., \temp> Also, users with extended keyboards
will no longer be able to display theRundialog box by pressing the
Application key (the key with the Windows logo) + R. If youdisableor do
not configure this setting, users will be able to access theRuncommand in
the Start menu and in Task Manager and use the Internet Explorer Address
Bar. Note:This setting affects the specified interface only. It does not
prevent users from using other methods torunprograms. Note: It is a
requirement for third-party applications with Windows 2000 or later
certification to adhere to this setting.
<quote>
from...
RemoveRunmenu from Start Menuhttp://www.boyce.us/gp/gpcontent.asp?ID=346

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

InValerie C <Valerie (e-mail address removed)> hunted and pecked:


We disabled theruncommand in our GPO and now realizes that that disables
using UNC pathing in Windows Explorer. Is there any way around this?-
Hide quoted text -

- Show quoted text -

If I disable run will it still be available for the admin account?
Need to have access while denying to users.
 
Back
Top