Group Policy Local Computer

Posted on 2014-04-10
Last Modified: 2014-04-15
Hello Experts...I have a computer where I want to restrict access to Windows Explorer.  Using the Local Group Policy Editor what do I need to do to prevent access to Windows Explorer.  This is a Windows 7 64 bit PC.   Please advise.  Thanks!
Question by:submarinerssbn731
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
  • +1
LVL 10

Expert Comment

by:Alex Green
ID: 39991712
gpedit.msc should do it.

Author Comment

ID: 39991752
Okay...but what setting in the group policy editor will prevent this?
LVL 10

Expert Comment

by:Alex Green
ID: 39991807
Ah, I don't think the local group policy will allow you to do that actually, I just checked and I can't see any options there...

Sorry :*(
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

LVL 80

Accepted Solution

David Johnson, CD, MVP earned 500 total points
ID: 39991929
you say restrict explorer .... do you want the user to just run 1 application

f you want to use a different shell, modify the following registry key with a string value containing the appropriate executable file:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Shell

Shells Other Than Explorer.exe Replaced on Installation or Upgrade -

you can also change the permissions for explorer.exe and set the permissions that that user doesn't have execute rughts.
LVL 54

Expert Comment

ID: 39994749

You have to provide some details. What should that be good for?
restricting explorer.exe in particular is difficult as it's the whole shell, not only the file browser. So yes, you could exchange the shell for another program and restrict the rest - if that's sensible depends on your goal.

Author Closing Comment

ID: 40001384
Great answer!  Thanks!
LVL 54

Expert Comment

ID: 40001407
To be added: circumventing this is easy as long as you have access to any open dialogue (CTRL-O) or task manager (CTRL-Shift-Esc).

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

One of the features I've come to appreciate about Windows 7 and Windows Server 2008 R2 is the ability to pin applications to the task bar. As useful a feature as I've found this, it does have some quirks.  For example, have you ever tried pinning an…
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This Micro Tutorial will teach you the basics of configuring your computer to improve its speed. It will also teach you how to disable programs that are running in the background simultaneously. This will be demonstrated using Windows 7 operating…
This Micro Tutorial will teach you how to change your appearance and customize your Windows 7 interface to your unique preference. This will be demonstrated using Windows 7 operating system.

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question