svenswenson
asked on
"Safely Remove Hardware" and Restrictions
Hi All,
We have a lab environment where we block access to the control panel. When users plug in USB devices, they're prevented from using the "Safely Remove Hardware" feature since it's a control panel app. Is there any way we can securely prevent access to the control panel and still allow users to safely unplug their hardware? I've seen this problem at other places, but I can't find a solution anywhere.
Thanks.
We have a lab environment where we block access to the control panel. When users plug in USB devices, they're prevented from using the "Safely Remove Hardware" feature since it's a control panel app. Is there any way we can securely prevent access to the control panel and still allow users to safely unplug their hardware? I've seen this problem at other places, but I can't find a solution anywhere.
Thanks.
ASKER
Yes, it does appear in the Taskbar. However, when users try to open it, they get a message saying "This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator."
If the control panel is enabled, then they're able to access the app through the system tray.
If the control panel is enabled, then they're able to access the app through the system tray.
Personally, I've never done this, but I think you can use the 'Hide specified control panel applets' to prevent the control panel .cpl files (ex: desk.cpl, powercfg.cpl) from being used, just don't put the one in that handles the hardware, though I don't know which one that is (maybe DevApps.cpl??)..
Maybe this will point you in the right direction? Good luck.
Maybe this will point you in the right direction? Good luck.
ASKER
No dice. This will just hide the applet shortcuts in the Control Panel, but users can still run them from Explorer, batch file, etc. We're trying to prevent that.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Went the permissions route. Not the most elegant solution (no knock on Poser, just on Windows), but I think it's the best one available.
got o user configuration\admin templates\control panel and enable "show only specified control panel applets " and add hdwwiz.cpl control panel applet.
This is hide all the other control panel applets except add/remove hardware wizard...
you will be now able to remove the usb drive safely.
This is hide all the other control panel applets except add/remove hardware wizard...
you will be now able to remove the usb drive safely.
Joe