+ Post New Thread
Results 1 to 8 of 8
Windows 7 Thread, Best way to lock down manage computer from right clicking on computer desktop icon? in Technical; We have been setting up our new Server 2008 R2 for some time and have nearly finished all our security ...
  1. #1
    reggiep's Avatar
    Join Date
    Apr 2008
    Location
    In the vast area of space and time
    Posts
    1,548
    Thank Post
    517
    Thanked 56 Times in 50 Posts
    Rep Power
    29

    Best way to lock down manage computer from right clicking on computer desktop icon?

    We have been setting up our new Server 2008 R2 for some time and have nearly finished all our security checks and GPO creation. however one thing which is out of my grasp is being able to stop students right clicking on the Computer icon on the Win 7 desktop and then manage to manage the computer.

    What would be the best way to lock this down without disabling the right click.

    thanks

  2. #2
    cpjitservices's Avatar
    Join Date
    Jul 2010
    Location
    Hessle
    Posts
    2,421
    Thank Post
    508
    Thanked 282 Times in 258 Posts
    Rep Power
    81
    Deny access to the control panel etc

  3. #3
    tigerstar's Avatar
    Join Date
    Jun 2009
    Location
    Shropshire, UK
    Posts
    52
    Thank Post
    12
    Thanked 15 Times in 14 Posts
    Rep Power
    13
    Add a software restriction policy for those users to prevent them running mmc.exe. This will lock out all ways of getting into the management console, regardless of approach.

  4. Thanks to tigerstar from:

    reggiep (26th March 2012)

  5. #4
    reggiep's Avatar
    Join Date
    Apr 2008
    Location
    In the vast area of space and time
    Posts
    1,548
    Thank Post
    517
    Thanked 56 Times in 50 Posts
    Rep Power
    29
    I would if I could, I already have a thread open explaining that no matter what I do I cannot get software restrictions to apply! I think I may well have to take another look at it.

  6. #5
    cromertech's Avatar
    Join Date
    Dec 2007
    Location
    Cromer by the coast
    Posts
    731
    Thank Post
    177
    Thanked 109 Times in 97 Posts
    Rep Power
    54
    Group policy --> User/admin templates/windows components/explorer/ Hide the manage item on the context menu

    May only do it for explorer itself not the start menu though

  7. Thanks to cromertech from:

    reggiep (26th March 2012)

  8. #6

    DaveP's Avatar
    Join Date
    Oct 2006
    Location
    Can't talk now: The mother-ship is calling!
    Posts
    8,784
    Thank Post
    351
    Thanked 1,274 Times in 870 Posts
    Blog Entries
    4
    Rep Power
    1126
    Our students do not see the Computer icon in their redirected Start Menus or Desktops.

    If you hid the icon would that solve your problem here?

  9. #7

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,072
    Thank Post
    853
    Thanked 2,676 Times in 2,270 Posts
    Blog Entries
    9
    Rep Power
    769
    You don't need to use a restriction policy, there is a whole option for it in GPO.

    User > Admin Templates > Win Components > MS Managment Console > Restrict users to the explicitly defined snapins

  10. Thanks to SYNACK from:

    reggiep (27th March 2012)

  11. #8

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,072
    Thank Post
    853
    Thanked 2,676 Times in 2,270 Posts
    Blog Entries
    9
    Rep Power
    769
    User > Admin Templates > Win Components > Win Explorer > Hides the manage item on the Windows Explorer context menu

  12. Thanks to SYNACK from:

    reggiep (27th March 2012)

SHARE:
+ Post New Thread

Similar Threads

  1. Where to re-enable right-click on the desktop
    By SimpleSi in forum Windows Server 2000/2003
    Replies: 10
    Last Post: 19th October 2011, 01:55 PM
  2. [MDT] Computer Naming- How does this work/ best way to do this
    By joematthews in forum O/S Deployment
    Replies: 11
    Last Post: 16th March 2011, 08:12 AM
  3. Best way to distribute new software to existing computers?
    By Sam_Brown in forum O/S Deployment
    Replies: 13
    Last Post: 10th February 2011, 11:19 AM
  4. Replies: 0
    Last Post: 22nd October 2010, 02:52 PM
  5. Replies: 3
    Last Post: 10th September 2010, 07:27 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •