Securing the desktop

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hello,

I work for a school system. In a nutshell, I would like for the lab PC's
(XP Pro - SP2) to only show the following icons on the desktop when the
students log on:

My Computer
My Documents
IE

Is this a registry change or is there a more managed approach thru GP?

The network is 2k3 domain (native). I don't mind pushing this out thru GP,
but I didn't quite see what I wanted. I use Ghost, so I don't mind tweaking
the initial image for these labs, I just need to know how to accomplish this
task.

thanks in advance,
Mel
 
You might also want to post in the setup_deployment newsgroup. You probably
can use a combination of Group Policy [start menu and desktop settings] and
the default user profile which you can create to your specifications where
you can configure My Computer/My Documents/IE using display properties -
desktop/customize desktop. Also keep in mind that the user profile is
merged with is what is in the all users profile when a user logs on so you
want to make sure that the desktop and start menus folder contain only what
you want in the all user profile , if anything. You might also want to look
at the free Shared Computer Toolkit part of which can be implemented in a
domain with .adm templates and the documentation for it is great in showing
how to manage user profile. Note that users will be able to add to the
desktop and start menu if they have default full control permissions to the
desktop and start menu folder in their user profile though you can change
that via logon script and the cacls command if needed. The links below may
help. --- Steve

http://www.microsoft.com/windowsxp/sharedaccess/default.mspx --- Shared
Computer Toolkit
http://support.microsoft.com/kb/319974 --- configure default profile
 
I will give this a try as well as the toolkit.

I had posted to the group you suggested but did not get a response.

thanks,

Mel

Steven L Umbach said:
You might also want to post in the setup_deployment newsgroup. You probably
can use a combination of Group Policy [start menu and desktop settings] and
the default user profile which you can create to your specifications where
you can configure My Computer/My Documents/IE using display properties -
desktop/customize desktop. Also keep in mind that the user profile is
merged with is what is in the all users profile when a user logs on so you
want to make sure that the desktop and start menus folder contain only what
you want in the all user profile , if anything. You might also want to look
at the free Shared Computer Toolkit part of which can be implemented in a
domain with .adm templates and the documentation for it is great in showing
how to manage user profile. Note that users will be able to add to the
desktop and start menu if they have default full control permissions to the
desktop and start menu folder in their user profile though you can change
that via logon script and the cacls command if needed. The links below may
help. --- Steve

http://www.microsoft.com/windowsxp/sharedaccess/default.mspx --- Shared
Computer Toolkit
http://support.microsoft.com/kb/319974 --- configure default profile

Mel said:
Hello,

I work for a school system. In a nutshell, I would like for the lab PC's
(XP Pro - SP2) to only show the following icons on the desktop when the
students log on:

My Computer
My Documents
IE

Is this a registry change or is there a more managed approach thru GP?

The network is 2k3 domain (native). I don't mind pushing this out thru
GP,
but I didn't quite see what I wanted. I use Ghost, so I don't mind
tweaking
the initial image for these labs, I just need to know how to accomplish
this
task.

thanks in advance,
Mel
Click to expand...
Click to expand...
 
Back
Top