Solved

disabling properties/shortcuts from menu

Posted on 1997-08-29
8
235 Views
Last Modified: 2013-12-23
Is there a registry hack to stop the "properties" option
appearing on the File menu on the desktop icons? For example
I'd like to stop users using properties to change the target
of a desktop icon from H: to c:\
??

Thanks!!
0
Comment
Question by:tmaclachlan
8 Comments
 
LVL 12

Expert Comment

by:j2
Comment Utility
Yes, by enforcing a policy on the machine, from a WinNT PDC.
0
 

Expert Comment

by:Wilfred
Comment Utility
I do not know of a hack but,
if you do not want to allow your users to add, delete or change their desktop icons just make sure desktops are stored on a directory on a network disk with only read access.

btw: it is possible to remove all desktop icons with the policy editor.
0
 

Author Comment

by:tmaclachlan
Comment Utility
I'm aware of this. However, if users can create a shortcut target
to drive c:\ from their writable space on the network, which
is a HUGE loophole. If the "properties" or "create shortcut"
could be disabled with the registry it would stop them from
doing this. otherwise they could create a shortcut even if
there were no desktop icons.

0
 
LVL 5

Expert Comment

by:y96andha
Comment Utility
What are you trying to achieve? Even if you set policies not to show certain drives, you can enter the drive letter, like C:, in any open or save file dialog and get there anyway. And you can rename, delete and execute files from an open or save dialog.
0
Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 
LVL 2

Expert Comment

by:jerryd
Comment Utility
tmaclachlan,
The short answer is no - you can't (safely) stop the system from displaying the properties of the shortcut.

HOWEVER, is your aim is to thwart users that think they're technicians, here's a few suggestions:

1. If you're on a network, copy the shortcut to their desktop during the login process - overwriting the shortcut if it already exists - then YOU control the properties of the shortcut.

2. Make a copy of the shortcut in the WINDOWS\SYSTEM directory only rename it from SHORTCUT.LNK to something like SHORTCUT.SYS (users tend to shy away from files that end in .SYS, .DRV).  Then, create a batch file called WINSTART.BAT that copies the shortcut from C:\WINDOWS\SYSTEM\SHORTCUT.SYS to C:\WINDOWS\DESKTOP\SHORTCUT.LNK (if that's where your user's desktops are).

Of course, always mark it read-only - this will stop some users from messing!

Jerry

0
 

Author Comment

by:tmaclachlan
Comment Utility
Nice idea..but it still doesn't stop someone from creating
a shortcut on their network home directory or from a floppy
drive straight to c:\


0
 

Expert Comment

by:joesurf
Comment Utility
So you basically want to stop users from using up space on the C: for storage ?

If so, then you can do one of two things..

1. Purchase third party software, that prevents access to certain Windows components, I know of a product but don't have the details right here.  You'd want to restrict access to the command prompt as well as they can do what they like in a DOS shell.

2. Create a batch/script to delete all unwanted files on logoff, or fill up the hard disk so there is no room to store files, but just enough space for the system to function normally.

0
 
LVL 5

Accepted Solution

by:
heiko earned 70 total points
Comment Utility
there can't be any way because while the users session all links and icons are stored on the local disk even you have central stored profiles. Next you have no chance to protect all local stored items.

the only way I know is to suppress of starting unregistered software. you can setup in system policy to start only registered programs with full pathnames. then the user can change the links but is unable to start them. the next is to protect the central stored profile as mandatory so that all changes are lost on next logon.

I hope this is a solution.
Heiko
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

Greetings, Experts! First let me state that this website is top notch. I thoroughly enjoy the community that is shared here; those seeking help and those willing to sacrifice their time to help. It is fantastic. I am writing this article at th…
Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now