Regedits & User Profiles 1

[SAM27]

Does anybody know how to disable the web toolbar in Office 97 applications? We are trying to lock down the desktop for public access sites, but can't stop users adding web bar to toolbar and browsing hard drive this way. <br>Also trying to prevent users running MS-DOS Command Prompt from disk.<br>We've locked everything else down & are still left with these 2 problems.<br>Can you help?<br>Thanks, SAM

 

[Zelandakh]

If you mean command prompt from booting with a floppy disk, change BIOS setting to boot from C first and password protect the BIOS.<br><br>Web bar must be part or all of a dll file - don't know which one but you should be able to remove it. Never tried though <br><br>These thoughts will work across all profiles and don't need regedit.

 

[SAM27]

Thanks for your help. What I meant about users introducing MSDOS by disk was that even thought they have no permissions for the Command Prompt on the PC, they can still run a .exe file if they bring it on their own disk. We are looking for a way to prevent this. We've protected the BIOS so I think that's OK now.<br>Yours endlessly searching dll files,<br>SAM<br>

 

[Zelandakh]

If you remove the START RUN command and hide drives in My Computer, they can't access the floppy disk.<br><br>Failing that, remove the floppy disk physically....<br><br>&lt;evil grin&gt;

 

[pbwarrior]

On the floppy problem. If you want to restrict users from accessing the floppy at all, there is a service on the tech net cd called floplock. You install it and set it up as a system account and start the service. <br><br>This will disable the floppy to everyone except administrators.

 

[Guest_imported]

If you run the System Policy Editor (poledit), you can then edit the policies of the users. SOme of the options are disabling the log off, Hide start menu sub-folders, Hide Drives is my computer, Hide all items on desktop, and one of my favorites &lt;g&gt; run only allowed windows application (You can make a list of application that a user is allowed to run).<br><br><br>I'm not sure if this helps you with your present problem(s) however, I guess you will just have to look through the available policies, if you haven't allready done so <br><br><br> <p>John Vogel<br><a href=mailto:johnvogel@homepage.com>johnvogel@homepage.com</a><br><a href=

http://i.winfire.com/s/isapiEng.dll/wf.exe?cmd=rl&452,20004878&wf.exe>Get

FreeDSL Service</a><br>[To a get FREE DSL Modem WITH FREE DSL Unlimited Internet Connection click the above link ]

 

[ZzEther]

Piece of cake.<br><br>REGEDIT4<br><br>[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]<br>&quot;NoRun&quot;=dword:00000001<br>&quot;NoDrives&quot;=dword:03ffffff<br><br>[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp]<br>&quot;Disabled&quot;=dword:00000001<br><br>Cut and paste this into a .reg file.&nbsp;&nbsp;Use regedit.exe /s in a login scrip to import it.&nbsp;&nbsp;NoRun will remove the run command.&nbsp;&nbsp;NoDrives will remove all th drives except C and D.&nbsp;&nbsp;Experiment with changiong those digits (1-9 and a-f) to see what drives they will hide (changes are immediate, just refresh my computre after changing one in regedit but the ZERO there is just a placeholder, start with the 3.)&nbsp;&nbsp;WinOldApp-Disabled set to 1 will disable the execution of any DOS program, including any you have installed so be careful with this one.<br>