Hiding security tab from domain clients?

Posted on 2007-08-03
Last Modified: 2008-10-05
Hello and good day!  

I have a 2003 domain server.  How can I hide the security tab on folders from domain clients?

Question by:Victor_Torres
    LVL 19

    Expert Comment


    1. Log on to the computer running Windows NT Server or Workstation as a local user who has Administrator rights.  
    2. Open Windows NT Explorer and go to Winnt\System32.  
    3. Search for the Rshx32.dll file.  
    4. Go to the Properties of this file.  
    5. Click the Security tab and then click Permission.  
    6. Remove the Read permission of everyone and then add the appropriate rights to the appropriate users or user groups.  
    7. Restart the computer.  
    Now, only the users who have been assigned the rights can see the Security tab.
    LVL 19

    Expert Comment

    LVL 82

    Expert Comment

    that article is about Windows 2000.

    It's gotten easier in an AD domain with XP clients. Simply set the policy "Remove Security Tab" in User Configuration\Administrative Templates\Windows Components\Windows Explorer to "Enabled" in a GPO applied to the user accounts in question.

    Author Comment

    Hello oBda;
           I tried your solution but for some reason I can't get it to work.  It seem that I'm missing a step.  Would you happen to have the step by step to this solution?

    LVL 19

    Accepted Solution

    from memory (hopefully i'm not too far off)
    setting up the gpo

    open dsa.msc (active directory users and computers)
    go to the OU that you want the policy to be applied to
    right-click on the OU - choose properties
    click on the group policy tab
    click add
    type the name
    click edit
    goto here (haven't verified it's there, buthe said it was)
    User Configuration\  
     Administrative Templates\
      Windows Components\
       Windows Explorer\
        "Remove Security Tab" set to "Enabled"

    close, then go to the workstation with a user that is logged on in the OU

    start - run - gpupdate /force
    yes to logoff or reboot, depending on what it asks

    log on and it should be set

    Author Comment

    Thanks for the help weellio I really appeciate it .  I was able to removed the security tab by following your procedure with one more additional step.  I had to click on division > right click the right pane > new > Organizational Unit > creat new name > right click the new name > properties > Group policy click add > all >choose removed security policy > exit out > then drag the user name to that Division.  
          Is the additional step necessary or I'm just missing something from your procedure?  
     I also tried to undo the changes but I can't get the security tab to show up again...

    LVL 19

    Expert Comment

    did you ever get your security tab back?

    Expert Comment

    Also another way of disabling the security tab from any user or groups is to deny file access to the following files:
    Windows XP X64: "%SystemRoot%\Syswow64\rshx32.dll"
    Windows XP x32: "%SystemRoot%\system32\rshx32.dll"

    It will just not show up when looking at folder properties. Simple but it works.
    Hope that helps someone.

    Featured Post

    What Is Threat Intelligence?

    Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

    Join & Write a Comment

    Companies that have implemented Microsoft’s Active Directory need to ensure that the Active Directory is configured and operating properly. If there are issues found and not resolved, it eventually leads the components to fail or stop working and fi…
    Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    732 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    23 Experts available now in Live!

    Get 1:1 Help Now