Solved

XP Security issue

Posted on 2004-10-20
12
290 Views
Last Modified: 2013-12-04
Hi. I am attempting to restrict users from accessing the system and system32 folders on winxppro. I have appplied group policy on both domain and local machine level. This has enabled me to block access to the c drive directly, however if you click on start menu then double click on programs, this takes you into the c drive. You can then browse as much as you want. I have tried using security restrictions for the group on these folders, but that results in word trying to install features again and again, getting stuck. Please help!!
0
Comment
Question by:chairborne1
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 5
12 Comments
 
LVL 71

Expert Comment

by:Chris Dent
ID: 12356414

I deceptively hard one to really disable...

Here's a few more ways for you:

1. Disable Access to the Run command (obvious)
2. Disable Right Click Context menues on the Start Menu (stops Explore All Users, Open All Users)
3. Disable Right Click on the Desktop (Stops Find Target on Shortcut)
4. Remove the Command Prompt from the Start Menu (Stops "Start C:" etc)

I'm sure there's more I forgot there as well.
0
 

Author Comment

by:chairborne1
ID: 12356423
Thanks for the reply chris - Tried and done all those which achieved what they were supposed too!
 Can still double click though!
0
 
LVL 71

Expert Comment

by:Chris Dent
ID: 12356462

Hmm... I wonder what controls that one... let me have a quick look around.

Sometimes I wonder why they even bothered adding policies to restrict access to drives ;)
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 71

Expert Comment

by:Chris Dent
ID: 12356500

Well it seems the only thing I can come up with is Folder Redirection for the Start Menu...
0
 

Author Comment

by:chairborne1
ID: 12356542
Thanks,

We'll give it a try, and let you know how it went. Bit loathe to redirect all start menus to the users profile though as we have over 1800 users, hot desking on to one profile server.
0
 
LVL 71

Expert Comment

by:Chris Dent
ID: 12356628

Yeah understandable...

Perhaps turning off personalised start menus and redirecting the All Users version would work?
0
 

Author Comment

by:chairborne1
ID: 12356712
Tried this already, didn't work either....... just pointed it at the server instead of the local machine...... getting to be a major puzzle this one..........
0
 
LVL 71

Expert Comment

by:Chris Dent
ID: 12356765

Yuch... what one is really quite tricky. Maybe they should include an option to disable left click as well ;)
0
 

Accepted Solution

by:
chairborne1 earned 0 total points
ID: 12356895
Solved it chris!

Open your registry and find the key [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion \Policies\Explorer]

Create a new DWORD value and name it "DisallowRun" set the value to "1" to enable application restrictions or "0" to allow all applications to run.

Then create a new sub-key called [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion \Policies\Explorer\DisallowRun] and define the applications the are to be restricted. Creating a new string value for each application, named as consecutive numbers, and setting the value to the filename to be restricted (e.g. "regedit.exe").

Works to block all paths as well as blocking executables.  Had to user %System Root% variable for varying systems though.

Thanks to John N, one of our own technicians, who found the answer on kellys-korner-xp.com/xp_a.htm
0
 

Author Comment

by:chairborne1
ID: 12356906
Next problem ---- how do I close my own question :-)
0
 
LVL 71

Expert Comment

by:Chris Dent
ID: 12357220

Very nice indeed... must remember that one :)

To close your question as self-answered drop a question into the Community Support forum asking for close and refund.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

So the following errors occurs in 2 ways that I am aware of at this stage, and you receive one of the following error messages: ERROR 1. When trying to save a rule: No Web listener is specified for the Web publishing rule Autodiscovery Publishin…
SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question