Start Menu/Taskbar Security

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi,

In Windows 98SE By Using The System Policy Editor, It Was Possible To
Make The "run" Command Unavailable And Various Items On The Start
Menu/All Programs Menu, And The Control Panel, Unavailable Or
Unmodifiable By Certain Users Under "Family Login". How And Where Do I
Accomplish The Same Thing In The Windows XP Pro (SP2) "Guest" Account,
Or ANY Other Account For That Matter?
--
John A. Dixon
Sierra Data Services
A Powerware Power Alliance Member
Authorized Reseller For:
Microsoft Products
ESET NOD32 Anti-Virus
Golden Bow''s VOPT
Smart Strip Power Strips
Seagate Drives
 
You can use the Group Policy editor (Gpedit.msc) under the following
location to configure Start menu features:
User Configuration\Administrative Templates\Start Menu and Taskbar

Note: Except when noted, all of these registry settings are under the
following registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Policies\Explorer

The registry entries are DWORD values. A value of 1 is enabled, and a value
of 0 is disabled.

Policy: Remove Run item from Start Menu
Description: Removes the ability to execute programs from the Run option on
the Start menu, Task Manager, or by pressing Win key + R. Also removes the
corresponding checkbox from the Start menu customization CPL.
Registry Value: "NoRun"


Policy: Remove Run item from Start Menu
[[Allows you to remove the Run command from the Start menu, Internet
Explorer, and Task Manager.

If you enable this setting, the following changes occur:

(1) The Run command is removed from the Start menu.
(2) The New Task (Run) command is removed from Task Manager.
(3) The user will be blocked from entering the following into the Internet
Explorer Address Bar:

--- A UNC path: \\<server>\<share>

---Accessing local drives: e.g., C:

--- Accessing local folders: e.g., \temp>

Also, users with extended keyboards will no longer be able to display the
Run dialog box by pressing the Application key (the key with the Windows
logo) + R.

If you disable or do not configure this setting, users will be able to
access the Run command in the Start menu and in Task Manager and use the
Internet Explorer Address Bar.

Note:This setting affects the specified interface only. It does not prevent
users from using other methods to run programs.

Note: It is a requirement for third-party applications with Windows 2000 or
later certification to adhere to this setting.]]

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
Back
Top