Remove/Disable Add a Network Location

I am looking for a way to disable the Add a Network Location found in File -> Add Network Location in Windows 7.  I am looking to do this via Group Policy.  
Screenshot

I have enabled the following GP: Prohibit Access to the New Connection Wizard (this is the wizard that appears when someone selects Add a Network Location) but I am still able to add a Network Location despite this.

Any idea where I can prevent access to this feature?

Thank you.
arkhaminmate11nAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

VB ITSSpecialist ConsultantCommented:
You'll need to disable users from adding or disconnecting to a network drive altogether if you want to disable this feature.

To do this, go to User ConfigurationPoliciesAdministrative TemplatesWindows ComponentsWindows Explorerenable the Remove "Map Network Drive" and "Disconnected Network Drive" setting.

This will remove any buttons and abilities to map and disconnect network drives. Users can still see the options in the context menu when they right click on Computer in the navigation pane but they will not be able to map to anything apart from (I think) FTP and external sites.

Alternatively you can look at just removing the File option from the menu bar in Explorer.
To do this, go to User ConfigurationPoliciesAdministrative TemplatesWindows ComponentsWindows Explorerenable the Remove File menu from Windows Explorer setting.
0
arkhaminmate11nAuthor Commented:
Thanks.  I have also enabled the Remove Map Network Drive and Disconnected Network Drive as well.  Users can still map FTP/External sites as you noted.  Is there a registry key that will just disable the Add a Network Location?  I would prefer not to disable the File menu from Windows Explorer.
0
VB ITSSpecialist ConsultantCommented:
Is there a registry key that will just disable the Add a Network Location?
Unfortunately I haven't been able to find any registry key which will remove this option from the File menu.

The File menu does very little in Explorer anyway so I don't see the harm in removing it. When you select a file then click on the File menu, the options you see are the same options you would get when you right click on the item. The options you get for a folder are even less.
0
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

arkhaminmate11nAuthor Commented:
Unfortunately, when you disable File from Windows Explorer, this removes File from Internet Explorer too.  Any other suggestions?
0
VB ITSSpecialist ConsultantCommented:
In that case, no. I do recall looking for a way to remove the command a fair while back when I began locking down Terminal Servers but could never find anything that would actually remove this one entry, unlike removing entries from the right click context.

In the end I decided to just remove the File menu as mentioned above as it's not entirely needed. There are other ways to use the functions provided by the File menu.
0
arkhaminmate11nAuthor Commented:
I figured out a way to work around the problem where if you use the GP, User Configuration > Policies > Administrative Templates > Windows Components > Windows Explorer > enable the Remove File menu from Windows Explorer, the File menu is also hidden in Internet Explorer.

To accomplish this, I used this GP: User Configuration > Policies > Administrative Templates > Windows Components > Internet Explorer > Toolbars > Hide the Command Bar > Disabled

Then I added a registry key so I could display only the commands I wanted.

Software\Microsoft\Internet Explorer\LowRegistry\CommandBar\CommandBandLayout

To get the Command Bar exactly the way you want it so the Command Bar just displays the commands you want, first configure a machine with the Command Bar the way you want it.  Then, go to the registry on this machine and copy the data.  Use this data string when you deploy the registry key in GP.

Here is an example:
Registry.png
So here are the GPs I used:

User Configuration > Policies > Administrative Templates > Windows Components > Windows Explorer > enable the Remove File menu from Windows Explorer

User Configuration > Policies > Administrative Templates > Windows Components > Internet Explorer > Toolbars > Hide the Command Bar > Disabled

Registry Key

For my setting, I also used

User Configuration > Policies > Administrative Templates > Windows Components > Internet Explorer > Toolbars > Configure Toolbar Buttons> Enabled > Show All Text Labels

and

User Configuration > Policies > Administrative Templates > Windows Components > Internet Explorer > Turn on menu bar by default > Enabled

Here is the end product:

IE-Command.png
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
arkhaminmate11nAuthor Commented:
I had to dig deeper to actually find a solution that would work for me.  The workaround I figured out should help others as well.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 7

From novice to tech pro — start learning today.