[Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Hide programs/items from control panel via Group Policy?

Posted on 2009-02-10
8
Medium Priority
?
385 Views
Last Modified: 2012-05-06
Hello people,

Have a quick question, have just more or less sorted our domain group policy...I have 2 seperate group policies one for User and one for Computers...all defined by groups/uers in security groups..

I made 2 changes in the Computer group which was to disable the Windows Firewall Service...and also Disabled it via Network connections (both for domain/standard)

Found that it works fine and in the control panel it is disabled..however the Startup Type is still available to me so for the Firewall Service I can select it back to Automatic and start the service again...

Ideally would like to stop that too...also if I went to control Panel/Firewall and double click on it..it says that the Firewall Service cannot be started..but asked if me if I want to start the service again!

This is not ideal...is there a way I can either hide the icon or stop users from attempting to start the service?
0
Comment
Question by:Solpak
  • 5
  • 3
8 Comments
 
LVL 4

Expert Comment

by:dirtysnipe
ID: 23602206
have a nose through this. Should be of use.

http://technet.microsoft.com/en-us/library/bb490626.aspx#EBAA
0
 
LVL 4

Accepted Solution

by:
dirtysnipe earned 750 total points
ID: 23611619
Create a new Group Policy object, and give the object a descriptive name (for example, ITS-Turn off Windows Firewall).
Select the newly created group policy.
Right-click on the newly created policy and select Edit.
Expand the Computer Configuration folder, then the Administrative Templates folder.
Expand the Network folder, then the Network Connections folder, then the Windows Firewall folder.
Select the Standard Profile folder.
Double-click the Windows Firewall: Protect all network connections option.
Select Disabled, then click OK.
Select the Domain Profile folder.
Double-click the Windows Firewall: Protect all network connections option.
Select Disabled, then click OK.
Close the Group Policy dialog box.
In the Security Filter section, click Add.
Search for the objects that this group policy will be applied to, then click OK.
Close the Group Policy editor.
0
 
LVL 1

Author Comment

by:Solpak
ID: 23620591
Have tried all of the solutions above..I meant to remove the icon or disable it..

I can disable the firewall but the startup type can still be changed 'IF' the user wanted to but started the process (if they selected startup type to automatic)
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
LVL 4

Expert Comment

by:dirtysnipe
ID: 23620602
but if you disable the firewall in group policy then user should not be able to start it via any way.

Does the user you are testing have any domain or local admin rights?
0
 
LVL 1

Author Comment

by:Solpak
ID: 23631715
sorted this myself within group policy...services then the appropriate service..click edit security and change permissions!!!

Now 'if' a user was to change it it comes with Error 5 Access is denied.

Please close.
0
 
LVL 4

Expert Comment

by:dirtysnipe
ID: 23631810
As i stated Use the correct group policy and as long as they are not a admin then they will be denied.
0
 
LVL 4

Expert Comment

by:dirtysnipe
ID: 23631817
Why wont you give me the points?
0
 
LVL 1

Author Comment

by:Solpak
ID: 23632394
No problem will allocate the points while you was very helpful..you did not mention anywhere that I had to edit the security and change permissions..also the term "Use the correct group policy" as im very new to this and not quite the expert yet :D

But its cool your links did prove useful and will give you the points..thanks again :)
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This is a little timesaver I have been using for setting up Microsoft Small Business Server (SBS) in the simplest possible way. It may not be appropriate for every customer. However, when you get a situation where the person who owns the server is i…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

865 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question