XP Security issue

Hi. I am attempting to restrict users from accessing the system and system32 folders on winxppro. I have appplied group policy on both domain and local machine level. This has enabled me to block access to the c drive directly, however if you click on start menu then double click on programs, this takes you into the c drive. You can then browse as much as you want. I have tried using security restrictions for the group on these folders, but that results in word trying to install features again and again, getting stuck. Please help!!
chairborne1Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

 
Chris DentPowerShell DeveloperCommented:

I deceptively hard one to really disable...

Here's a few more ways for you:

1. Disable Access to the Run command (obvious)
2. Disable Right Click Context menues on the Start Menu (stops Explore All Users, Open All Users)
3. Disable Right Click on the Desktop (Stops Find Target on Shortcut)
4. Remove the Command Prompt from the Start Menu (Stops "Start C:" etc)

I'm sure there's more I forgot there as well.
0
 
chairborne1Author Commented:
Thanks for the reply chris - Tried and done all those which achieved what they were supposed too!
 Can still double click though!
0
 
Chris DentPowerShell DeveloperCommented:

Hmm... I wonder what controls that one... let me have a quick look around.

Sometimes I wonder why they even bothered adding policies to restrict access to drives ;)
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

 
Chris DentPowerShell DeveloperCommented:

Well it seems the only thing I can come up with is Folder Redirection for the Start Menu...
0
 
chairborne1Author Commented:
Thanks,

We'll give it a try, and let you know how it went. Bit loathe to redirect all start menus to the users profile though as we have over 1800 users, hot desking on to one profile server.
0
 
Chris DentPowerShell DeveloperCommented:

Yeah understandable...

Perhaps turning off personalised start menus and redirecting the All Users version would work?
0
 
chairborne1Author Commented:
Tried this already, didn't work either....... just pointed it at the server instead of the local machine...... getting to be a major puzzle this one..........
0
 
Chris DentPowerShell DeveloperCommented:

Yuch... what one is really quite tricky. Maybe they should include an option to disable left click as well ;)
0
 
chairborne1Author Commented:
Solved it chris!

Open your registry and find the key [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion \Policies\Explorer]

Create a new DWORD value and name it "DisallowRun" set the value to "1" to enable application restrictions or "0" to allow all applications to run.

Then create a new sub-key called [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion \Policies\Explorer\DisallowRun] and define the applications the are to be restricted. Creating a new string value for each application, named as consecutive numbers, and setting the value to the filename to be restricted (e.g. "regedit.exe").

Works to block all paths as well as blocking executables.  Had to user %System Root% variable for varying systems though.

Thanks to John N, one of our own technicians, who found the answer on kellys-korner-xp.com/xp_a.htm
0

Experts Exchange Solution brought to you by ConnectWise

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
 
chairborne1Author Commented:
Next problem ---- how do I close my own question :-)
0
 
Chris DentPowerShell DeveloperCommented:

Very nice indeed... must remember that one :)

To close your question as self-answered drop a question into the Community Support forum asking for close and refund.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.