Stopping Students getting where they shouldnt be 1

[vermin]

I have an NT/2000 network, 1500 student users, 260 workstations. They have managed via the 'HELP' on start menu, to access different parts of the control panel and mess around with accessibility options and sticky keys. There is no a constant bleep going round the classrooms where they are activating sticky keys. Other than going to each workstation and uninstalling accesibility options, is there a way with policies to prevent them getting the 'HELP' on start menu or accessing the control panel options. They use mandatory profiles,with limited start menu but I cant find how to stop 'HELP' appearing there !
Its a teacher's nightmare..anyone ???

 

[TheLad]

You want to remove the *.CPL files under c:\winnt\system32.

For example:

main.cpl - Mouse properties
desk.cpl - Display Properties
access.cpl - Accessibility Properties (Sticky Keys)
inetcpl.cpl - Internet Properties
sysdm.cpl - System Properties
mmsys.cpl - Multimedia Properties
svrmgr.cpl - Server Properties (also Services and Device)
appwiz.cpl - Add/Remove Programs

etc.... -----------------------------------------------------
"It's true, its damn true!"
-----------------------------------------------------

 

[vermin]

Is there a way of including these settings in group policies to apply them to our group of 1500 students or is there any other way which does not involve me having to go and set these permissions on each workstation.

 

[TheLad]

You don't have to set permissions, just add a few lines into your login script to do something like the following:

if exist c:\winnt\system32\sysdm.cpl del c:\winnt\system32\sysdm.cpl

etc....

This way, you don't have to visit machines. Remember to keep a copy somewhere safe for when you need to do admin work on these workstations! -----------------------------------------------------
"It's true, its damn true!"
-----------------------------------------------------

 

[vermin]

Thanks for that, I'll give it a go.

 

[vermin]

That will cure our problem, but does anyone know in either 2000 or NT if there is a way of removing access to 'HELP'. Kids being kids, will investigate through anything they can find, 'HELP' gives access to lots of control panel and other administrative options..Suggestions

 

[johncurtis]

You can remove Help via the registry. You'll need to add an extra value in:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ExploreAdd Value name NoSMHelp as a REG_DWORD data type. Set the data
value to 1

You could do this via the logon script using a registry utility such as reg.exe.

hth
John