Group Policy Local Computer

Posted on 2014-04-10
Last Modified: 2014-04-15
Hello Experts...I have a computer where I want to restrict access to Windows Explorer.  Using the Local Group Policy Editor what do I need to do to prevent access to Windows Explorer.  This is a Windows 7 64 bit PC.   Please advise.  Thanks!
Question by:submarinerssbn731
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
  • +1
LVL 12

Expert Comment

by:Alex Green
ID: 39991712
gpedit.msc should do it.

Author Comment

ID: 39991752
Okay...but what setting in the group policy editor will prevent this?
LVL 12

Expert Comment

by:Alex Green
ID: 39991807
Ah, I don't think the local group policy will allow you to do that actually, I just checked and I can't see any options there...

Sorry :*(
PeopleSoft Has Never Been Easier

PeopleSoft Adoption Made Smooth & Simple!

On-The-Job Training Is made Intuitive & Easy With WalkMe's On-Screen Guidance Tool.  Claim Your Free WalkMe Account Now

LVL 81

Accepted Solution

David Johnson, CD, MVP earned 500 total points
ID: 39991929
you say restrict explorer .... do you want the user to just run 1 application

f you want to use a different shell, modify the following registry key with a string value containing the appropriate executable file:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Shell

Shells Other Than Explorer.exe Replaced on Installation or Upgrade -

you can also change the permissions for explorer.exe and set the permissions that that user doesn't have execute rughts.
LVL 55

Expert Comment

ID: 39994749

You have to provide some details. What should that be good for?
restricting explorer.exe in particular is difficult as it's the whole shell, not only the file browser. So yes, you could exchange the shell for another program and restrict the rest - if that's sensible depends on your goal.

Author Closing Comment

ID: 40001384
Great answer!  Thanks!
LVL 55

Expert Comment

ID: 40001407
To be added: circumventing this is easy as long as you have access to any open dialogue (CTRL-O) or task manager (CTRL-Shift-Esc).

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you try to extract and to view the contents of a Microsoft Update Standalone Package (MSU) for Windows Vista, you cannot extract the files from the MSU. Here we are going to explain how to extract those hotfix details without using any third pa…
By default the complete memory dump option is disabled in windows . If we want to enable the complete memory dump for a diagnostic purpose, we have a solution for it. here we are using the registry method to enable this.
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

719 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question