Couple of Win 7 GPO Settings Help

[karldenton]

Hi,

Just setting up Windows 7 and looking for a few settings in GPO that I can't find / need help with:


1 - Can you restrict them not been able to add to desktop (mainly they can right click - add folder then delete it). I've got set "Prevent Chaging Desktop Icons" in user settings - adm - control panel - personalisation but they can still add folders.

2 - On internet explorer when they go to favourites tab / history -- they can right click a history item and delete it, is there a way to stop that.

3 - Is there a way to change the button at the bottom to "Log off" and take off the switch user option

4- When Windows loads up is there a standard logon screen rather than the one that comes up with the previous user and an option to change user. It would be nice for them to type there user name in

Thanks for any help

Karl

[Garacesh]

No idea if it's of any use to you, but netplwiz (start > search bar > netplwiz) has an option for users to enter their username as well as their password.
Not sure if you can use that with group policy, though. Haven't touched the stuff yet.

[sted]

1 easiest way is redirect desktop top a read only location
2 gpo user settings\policies\admin templates\windows components\internet explorer\delete browsing history lots of settings there
3 gpo user configuration\preferences\control panel settings\power options create a new power plan and set default to hibernate/shutdown/logoff (its under power button and lid for some reason
4 gpo computer config\windows settings\security settings\local policies\security options\interactive logon: do not display last user name enabled

[Michael]

1. If you're using a redirected desktop (Folder Redirection), the share where the icons are pulled down should be made read only. This is the easiest solution to your problem.

2. Not so sure about this.

3. Yes, you can remove the switch option: Computer Config > Admin Templates > System > Logon - Hide entry points for Fast User Switching - Enabled

4. (As above)

[Garacesh]

Actually, whilst we're on folder redirection.. Can start menu's be redirected depending on the computer group, not the usergroup?
(The joys of planning a network... when you know very little of networking...)

[Michael]

Folder Redirection is a per user settings and not per computer.

[sted]

Folder Redirection is a per user settings and not per computer.

but can be overridden with loopback processing