+ Post New Thread
Results 1 to 8 of 8
Windows 7 Thread, Disable Device name Changes in Technical; One of my schools has got an issue with pupils changing the name of the Audio Device to random words ...
  1. #1


    Join Date
    Sep 2009
    Posts
    565
    Thank Post
    13
    Thanked 55 Times in 34 Posts
    Rep Power
    223

    Disable Device name Changes

    One of my schools has got an issue with pupils changing the name of the Audio Device to random words (sometimes, rather unpleasant ones) and they have asked me to disable the ability to change it.

    The kids are accessing the device summary screen and then changing the name there so that when you hover over the volume control icon you see what they have named it to. I have done some digging around on the internet and have not found any mention of disabling this ability and was hoping someone on here would be able to shed some light on the issue.

    Cheers

  2. #2
    Norphy's Avatar
    Join Date
    Jan 2006
    Location
    Harpenden
    Posts
    2,262
    Thank Post
    51
    Thanked 276 Times in 214 Posts
    Blog Entries
    6
    Rep Power
    113
    Interesting!

    My first thought would be to change the permissions of the registry key that holds that setting. Delving a little deeper into it, it appears that it's held under a GUID in

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\MMDevices\Audio\Render

    Set the permissions in regedit so that the AD group that your students are in are denied write access to that key and hopefully that'll fix you problem. Registry permissions can be set by group policy so hopefully this ought to be relatively simple to implement
    Last edited by Norphy; 17th May 2012 at 02:56 PM.

  3. Thanks to Norphy from:

    LeightonJames (17th May 2012)

  4. #3


    Join Date
    Sep 2009
    Posts
    565
    Thank Post
    13
    Thanked 55 Times in 34 Posts
    Rep Power
    223
    Awesome work Norphy!! Thanks for that!

    I had an inkling it was to do with a registry setting so i was about to do some of my own testing but you saved me the job! Nice one!

  5. #4

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,212 Times in 761 Posts
    Rep Power
    394
    I've just reproduced this here under our pupil accounts, and the complication I've found is that according to RegEdit, they don't have permission to set values in that registry key in the first place:

    effective.png

    I ran a ProcMon trace, and the problem is that the process that sets this value in the registry it is not running under their user account. It's a svchost.exe process run under the NT AUTHORITY\LOCAL SERVICE account. I suspect denying write access to that account will cause problems.
    Last edited by AngryTechnician; 17th May 2012 at 04:04 PM.

  6. #5

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,084
    Thank Post
    853
    Thanked 2,679 Times in 2,272 Posts
    Blog Entries
    9
    Rep Power
    769
    I guess you could track down which service it is and configure it to use a different (limited) account then deny permissions to that particular user. Probably the Windows Audio service.

    The other thing is that just locking out the write access to the specific name values rather than the whole key should not trip it up too much.

    You could also have a scheduled tack that ran at every logon that overwrote those keys back to their correct values which would not stop them changing it but would stop it from affecting others.

  7. #6


    Join Date
    Sep 2009
    Posts
    565
    Thank Post
    13
    Thanked 55 Times in 34 Posts
    Rep Power
    223
    Quick update on this for those who are interested.

    I don't have access to any GPO stuff as i'm just a lowly techie and my sys admins have just come back and said they can't do anything about it at the moment.

    Basically our Network setup is screwed up. We are running XP and Win 7 Machines on the same domain on a Server 2003 Network. We have had to apply workarounds to allow the user accounts to work on the network in this manner and as such we cannot apply any Win 7 specific GPO changes.

    The really bad thing about all this is due to the way the network has been setup and messed with over time is we have Domain Users (yes all of them) in the local Administrator group!! I know, Iknow. all of you now either have your head in your hands, are crying or are laughing at this ridiculous setup, but hey what can I do?? I am but a lowly techie!!

    My AD privileges extend to password resets and moving Computers into the correct OU's!! We can't even do Software deployment via MSI's. Whilst i love my job I sometimes hate the restrictions placed upon me!!!

    anyways, rant over. Just thought i should update you all and thanks for looking.

  8. #7
    cromertech's Avatar
    Join Date
    Dec 2007
    Location
    Cromer by the coast
    Posts
    731
    Thank Post
    177
    Thanked 109 Times in 97 Posts
    Rep Power
    54
    I was going to say disable the volume control icon or system try but without GP that will be very difficult.

    The way I allow access to the volume control is a shortcut to SndVol.exe in the start menu that just displays the mixer.

  9. #8

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,212 Times in 761 Posts
    Rep Power
    394
    We started having problem with this ourselves this term and it prompted me to look into this again. My eventual solution was to set file permissions via Group Policy to add a Deny rule for our pupils group on the on %SystemRoot%\System32\mmsys.cpl

    This control panel icon was already disabled by GP, but as others have found, you can still get to it by right-clicking on the volume control icon.

    Basically I just replicated the existing permissions for this file in Policies\Windows Settings\Security Settings\File System and then added the Deny rule in as well. This still gives them access to the mixer via the normal system tray icon, but if they right-click and try to open Playback Devices, nothing will happen.

    Meanwhile, Staff and admins can still access everything as normal.

    Attached Images Attached Images

  10. 3 Thanks to AngryTechnician:

    d-taylor (26th March 2014), FragglePete (18th April 2013), One_Minute_Hero (21st November 2012)

SHARE:
+ Post New Thread

Similar Threads

  1. Staff Name Change
    By Nick_Parker in forum How do you do....it?
    Replies: 8
    Last Post: 18th January 2009, 06:28 PM
  2. AD domain name change
    By HodgeHi in forum Windows
    Replies: 9
    Last Post: 1st December 2008, 12:18 PM
  3. Wireless LAN name change on Netgear
    By MrsGrinch in forum Wireless Networks
    Replies: 1
    Last Post: 30th June 2008, 08:04 AM
  4. Email name change for user in exchange
    By Uraken in forum Windows
    Replies: 4
    Last Post: 18th May 2007, 10:17 AM
  5. Staff names changes as wedding season comes upon us.
    By Kyle in forum How do you do....it?
    Replies: 6
    Last Post: 28th June 2006, 06:57 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •