remove EVERYTHING from start menu 1

[chriscj21]

Please help!!!

Trying to create a fully locked down windows XP image, this needs to have an application load on startup for user and nothing else, no icons, nothing!

I am at the final stage - only thing I need now is to stop the ability to double click on programs in start menu and open explorer that way....

Any ideas?



MCSA, A+, N+

 

[bcastner]

Use regedit and change this:
HKEY_CLASSES_ROOT\CLSID\{5b4dae26-b807-11d0-9815-00c04fd91972}

to this:

HKEY_CLASSES_ROOT\CLSID\{-5b4dae26-b807-11d0-9815-00c04fd91972}

This disables the Start button and all menu bars.

 

[chriscj21]

Many thanks.....

As this is in HKCR tho this will effect all users....

Ideally only wanted this to apply to one.

any ideas

MCSA, A+, N+

 

[bcastner]

. Use regedit and export the registry key mentioned above.

In the logon script for that user, use REG DELETE

REG delete removes a key or value. When removing a key, it will remove all subkeys and values beneath that key; however, it will ask you to confirm your intentions before it actually deletes anything. As with REG update, you can only delete keys where the ACLs (and/or the remote Registry settings) allow you access.

REG DELETE KeyName [/v ValueName | /ve | /va] [/f]

KeyName [\\Machine\]FullKey

Machine Name of remote machine - omitting defaults to the current machine. Only HKLM and HKU are available on remote machines

FullKey ROOTKEY\SubKey

ROOTKEY [ HKLM | HKCU | HKCR | HKU | HKCC ]

SubKey The full name of a registry key under the selected ROOTKEY

ValueName The value name, under the selected Key, to delete. When omitted, all subkeys and values under the Key are deleted

/ve delete the value of empty value name <no name>

/va delete all values under this key

/f Forces the deletion without propmt

In the Shutdown script for that user, and/or in the logon script for all other users, use regedit /s exported_key.reg[/i] to restore the settings.

 

[starzwell]

You could also try a progam called icon lock we use it in schools and it works well to keep kids away from things we don't want them to use.

Steph

http://www.getfirefox.com

 

[chriscj21]

HELP!!!

Wrote a login script to add the key starting "-" for the locked down user and then had one for all other users to delete that key and add the normal one back....

HOWEVER, now for all users i have no ability to click the start menu at all!!!!

Plus I have lost the "file" menu in IE (6.0).


Any ideas much appreciated.


Chris

MCSA, A+, N+

 

[bcastner]

Open notepad on another computer and save the below as start.bar reg :

********** begin copy/paste below this line
REGEDIT4

[HKEY_CLASSES_ROOT\CLSID\{5b4dae26-b807-11d0-9815-00c04fd91972}]
@="Menu Band"

[HKEY_CLASSES_ROOT\CLSID\{5b4dae26-b807-11d0-9815-00c04fd91972}\InProcServer32]
@=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,73,79,73,74,65,6d,33,32,5c,53,\
48,45,4c,4c,33,32,2e,64,6c,6c,00
"ThreadingModel"="Apartment"

[-HKEY_CLASSES_ROOT\CLSID\{-5b4dae26-b807-11d0-9815-00c04fd91972}]

********* end copy/paste above this line

Save the file. Double-click to merge the contents with your registry. This will reverse the changes you made in your script.

If your intended application is IE based, use Kiosk mode instead of the above scheme to lock the desktop:

http://support.microsoft.com/support/kb/articles/q154/7/80.asp

 

[chriscj21]

MANY THANKS!!!!

Can u explain why this setting was not reverted back after I applied the changes in the login script???

Either way - thanks, got me out of a jam there BCastner!!!


Chris



MCSA, A+, N+

 

[bcastner]

Have not seen the script to know why. See the two .reg files below.

I would do the logic like this:

; for all users. This always runs
regedit /s startbar_enable.reg

; handle special users
if %username%=="chrisjc21"
regedit /s startbar_disable.reg
endif

--------------

STARTBAR_enable.REG
; reverse any changes made for a special users
; runs for all users
********** begin copy/paste below this line
REGEDIT4

[HKEY_CLASSES_ROOT\CLSID\{5b4dae26-b807-11d0-9815-00c04fd91972}]
@="Menu Band"

[HKEY_CLASSES_ROOT\CLSID\{5b4dae26-b807-11d0-9815-00c04fd91972}\InProcServer32]
@=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,73,79,73,74,65,6d,33,32,5c,53,\
48,45,4c,4c,33,32,2e,64,6c,6c,00
"ThreadingModel"="Apartment"

********* end copy/paste above this line

-----------------------
STARTBAR_disable.REG
; removes start button and menus
; runs for limited users

********** begin copy/paste below this line
REGEDIT4

[-HKEY_CLASSES_ROOT\CLSID\{5b4dae26-b807-11d0-9815-00c04fd91972}]

******** end copy/paste above this line

 

[chriscj21]

thanks bcastner....

Went about this in a similar way - changed slightly as have an autologon etc etc....

I created a login script based on a computer policy to disable the startmenu etc....

Then one for admin that re-enables it...

Thanks for all help#!!!

MCSA, A+, N+