For setting reg perms I used subinacl with the /subkeyreg switch
Example below, which sets perms so that users can't rename My Computer or
Recycle Bin
subinacl /subkeyreg
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID
/grant=%userdomain%\%username%=R
On 3 June 2011 15:12, Tom Miller <tmil...@hnncsb.org> wrote:
> Folks,
>
> What are you doing to hide the Windows Libraries feature from your users?
> We are moving to Win 7 and for now plan to keep it hidden.
>
> I know I can disable this via a registry key, but it won't apply via
> GPO/script since you have to manually change the key's permissions first.
> Or is there a way to change perms via a GPO?
>
> Key I am using is:
> Windows Registry Editor Version 5.00
>
>
> [HKEY_CLASSES_ROOT\CLSID\{031E4825-7B94-4dc3-B131-E946B44C8DD5}\ShellFolder]
> "QueryForOverlay"=""
> "HideOnDesktopPerUser"=""
> "PinToNameSpaceTree"=""
> "Attributes"=dword:b080010d
>
> Suggestions appreciated.
>
> Tom
>
> Confidentiality Notice: This e-mail message, including attachments, is
> for the sole use of the intended recipient(s) and may contain confidential
> and privileged information. Any unauthorized review, use, disclosure, or
> distribution is prohibited. If you are not the intended recipient, please
> contact the sender by reply e-mail and destroy all copies of the original
> message.
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
--
"On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question."
*IMPORTANT: The information in this email is CONFIDENTIAL. If its contents
are disclosed in any way my lawyers will swoop down from black helicopters
like Seal Team Six and drag you away with a black bag over your head. They
will then take you to a secret prison and make you fight to the death with
other people who dared to share this email. You will be given a large bowie
knife and a supply of methamphetamines while I watch the said deathmatch and
wager vast sums of money on who will be the winner. If the fight becomes
boring or there is a stalemate, I will release rabid dogs and my two-stone
cat into the arena to liven things up a bit. If these animals become in any
way docile, I will squirt them with water pistols until they become a bit
more temperamental.*
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
