• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 391
  • Last Modified:

Hide programs/items from control panel via Group Policy?

Hello people,

Have a quick question, have just more or less sorted our domain group policy...I have 2 seperate group policies one for User and one for Computers...all defined by groups/uers in security groups..

I made 2 changes in the Computer group which was to disable the Windows Firewall Service...and also Disabled it via Network connections (both for domain/standard)

Found that it works fine and in the control panel it is disabled..however the Startup Type is still available to me so for the Firewall Service I can select it back to Automatic and start the service again...

Ideally would like to stop that too...also if I went to control Panel/Firewall and double click on it..it says that the Firewall Service cannot be started..but asked if me if I want to start the service again!

This is not ideal...is there a way I can either hide the icon or stop users from attempting to start the service?
0
Solpak
Asked:
Solpak
  • 5
  • 3
1 Solution
 
dirtysnipeCommented:
have a nose through this. Should be of use.

http://technet.microsoft.com/en-us/library/bb490626.aspx#EBAA
0
 
dirtysnipeCommented:
Create a new Group Policy object, and give the object a descriptive name (for example, ITS-Turn off Windows Firewall).
Select the newly created group policy.
Right-click on the newly created policy and select Edit.
Expand the Computer Configuration folder, then the Administrative Templates folder.
Expand the Network folder, then the Network Connections folder, then the Windows Firewall folder.
Select the Standard Profile folder.
Double-click the Windows Firewall: Protect all network connections option.
Select Disabled, then click OK.
Select the Domain Profile folder.
Double-click the Windows Firewall: Protect all network connections option.
Select Disabled, then click OK.
Close the Group Policy dialog box.
In the Security Filter section, click Add.
Search for the objects that this group policy will be applied to, then click OK.
Close the Group Policy editor.
0
 
SolpakTechnical DirectorAuthor Commented:
Have tried all of the solutions above..I meant to remove the icon or disable it..

I can disable the firewall but the startup type can still be changed 'IF' the user wanted to but started the process (if they selected startup type to automatic)
0
Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
dirtysnipeCommented:
but if you disable the firewall in group policy then user should not be able to start it via any way.

Does the user you are testing have any domain or local admin rights?
0
 
SolpakTechnical DirectorAuthor Commented:
sorted this myself within group policy...services then the appropriate service..click edit security and change permissions!!!

Now 'if' a user was to change it it comes with Error 5 Access is denied.

Please close.
0
 
dirtysnipeCommented:
As i stated Use the correct group policy and as long as they are not a admin then they will be denied.
0
 
dirtysnipeCommented:
Why wont you give me the points?
0
 
SolpakTechnical DirectorAuthor Commented:
No problem will allocate the points while you was very helpful..you did not mention anywhere that I had to edit the security and change permissions..also the term "Use the correct group policy" as im very new to this and not quite the expert yet :D

But its cool your links did prove useful and will give you the points..thanks again :)
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 5
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now