+ Post New Thread
Page 2 of 2 FirstFirst 12
Results 16 to 30 of 30
Windows Thread, Restricting MMC. in Technical; Ive worked it all out, and saved it in a MMC called 'Pupil Password Management' But it wont open, for ...
  1. #16

    Join Date
    Nov 2007
    Posts
    554
    Thank Post
    3
    Thanked 3 Times in 3 Posts
    Rep Power
    15
    Ive worked it all out, and saved it in a MMC called 'Pupil Password Management'
    But it wont open, for anyone, unless its run on the server.

    Microsoft Management Console
    MMC cannot copen the file XXXXXXX\Pupil Password Management v1.msc.

    This may be because the file does not exist, is not an MMC console, or was created by a later version of MMC. This may also be because you do not have sufficient access rights to the file.
    Last edited by boomam; 8th January 2008 at 01:56 PM.

  2. #17

    Join Date
    Nov 2007
    Posts
    554
    Thank Post
    3
    Thanked 3 Times in 3 Posts
    Rep Power
    15
    Sorted that, redid the mmc on my XP workstation.

    Now the problem is that all the menu options under right click work.
    How do i disable them all, apart from passwords?

  3. #18
    ICTNUT's Avatar
    Join Date
    Jul 2005
    Location
    Hereford
    Posts
    1,419
    Thank Post
    196
    Thanked 249 Times in 122 Posts
    Rep Power
    62
    Did you save the file itself or a shortcut to the file??

    Also was it done on the server?? The MMC on the server could be v3.0 but the desktops could be v2.0, this was a problem I ran into when I rolled mine out.

    Download MMC 3.0 for XP SP2

  4. #19
    ICTNUT's Avatar
    Join Date
    Jul 2005
    Location
    Hereford
    Posts
    1,419
    Thank Post
    196
    Thanked 249 Times in 122 Posts
    Rep Power
    62
    You need to login as a teacher that is likely to use this and test it that way.

    Create a test user that you can delete, disable etc...

    Right click will work regardless but if you select something that you do not have the rights to do it will give you access denied.

  5. #20

    Join Date
    Nov 2007
    Posts
    554
    Thank Post
    3
    Thanked 3 Times in 3 Posts
    Rep Power
    15
    Quote Originally Posted by ICTNUT View Post
    You need to login as a teacher that is likely to use this and test it that way.

    Create a test user that you can delete, disable etc...

    Right click will work regardless but if you select something that you do not have the rights to do it will give you access denied.
    Sorted it, everything does appear, but nothing but properties & password actually work. Which is fine byme.
    Just need to roll out MMC to every computer with just the snap-ins installing on each system, and not displaying shortcuts...

  6. #21
    ICTNUT's Avatar
    Join Date
    Jul 2005
    Location
    Hereford
    Posts
    1,419
    Thank Post
    196
    Thanked 249 Times in 122 Posts
    Rep Power
    62
    Good to see you go it sorted

    Take a look at the custom adminpak.msi install link I posted earlier this will show you exactly how to do it.

  7. #22

    Join Date
    Nov 2007
    Posts
    554
    Thank Post
    3
    Thanked 3 Times in 3 Posts
    Rep Power
    15
    Quote Originally Posted by ICTNUT View Post
    Good to see you go it sorted

    Take a look at the custom adminpak.msi install link I posted earlier this will show you exactly how to do it.
    I take that that the:
    msiexec /i adminpak.msi ADDLOCAL=FeADTools /qb
    command can be run as a startup script in a GPO?
    Plus, what does the command switch "/qb" do. I'd like to find a list of command switches for that, but cant.
    As i'd like to find the switches to make the install happen silently, and to add no shortcuts.

    That 'staff' guide you created, in your first post, by any chance do you have the original template for that lying around in a format i can edit? Im too lazy to create one myself.

    Thanks for all the help btw. Its been much appriciated. .

  8. #23

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    Here's the technet article on msiexec command line options. Beware, it is long and complex.

    http://technet2.microsoft.com/window....mspx?mfr=true

  9. #24

    Join Date
    Nov 2007
    Posts
    554
    Thank Post
    3
    Thanked 3 Times in 3 Posts
    Rep Power
    15
    Quote Originally Posted by Geoff View Post
    Here's the technet article on msiexec command line options. Beware, it is long and complex.

    http://technet2.microsoft.com/window....mspx?mfr=true
    Thanks.
    Doesnt look like theres a command to set it so no shortcuts are installed, although changing the command to:

    msiexec /i adminpak.msi ADDLOCAL=FeADTools /qn

    Will hide the install process.

  10. #25

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    Quote Originally Posted by boomam View Post
    Thanks.
    Doesnt look like theres a command to set it so no shortcuts are installed
    Normally, you need to alter the tables in the MSI (or use a transform) to prevent those sorts of operations. Have a look at ORCA.

    http://support.microsoft.com/kb/255905

  11. #26

    Join Date
    Nov 2007
    Posts
    554
    Thank Post
    3
    Thanked 3 Times in 3 Posts
    Rep Power
    15
    Quote Originally Posted by Geoff View Post
    Normally, you need to alter the tables in the MSI (or use a transform) to prevent those sorts of operations. Have a look at ORCA.

    http://support.microsoft.com/kb/255905
    How do i use Orca to remove the shortcuts?
    It just looks like the editing program for FM at the moment! .

  12. #27

    Join Date
    Nov 2007
    Posts
    554
    Thank Post
    3
    Thanked 3 Times in 3 Posts
    Rep Power
    15
    lol. Sorted it!
    Dunno if this was the right way of doing it, but i just removed the shortcut and shortcuticons tables from the left columns, and re-saved.
    I tested it on a VM of a base XP install, and no shortcuts showed up! .

  13. #28

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    How do i use Orca to remove the shortcuts?
    That depends on the MSI. Check the properties table.

  14. #29

    Join Date
    Nov 2007
    Posts
    554
    Thank Post
    3
    Thanked 3 Times in 3 Posts
    Rep Power
    15
    Ive just seen this:
    http://www.edugeek.net/forums/showpo...11&postcount=3
    I cant get the view on the left without the entire AD showing, hows he done that?

    Plus, is there a way i can stop the user pressing backspace too many times to get access to the rest of AD?

  15. #30
    ICTNUT's Avatar
    Join Date
    Jul 2005
    Location
    Hereford
    Posts
    1,419
    Thank Post
    196
    Thanked 249 Times in 122 Posts
    Rep Power
    62
    is there a way i can stop the user pressing backspace too many times to get access to the rest of AD?
    Short answer is no but if youhave got the correct permissionsin place this should not be a problem really.

SHARE:
+ Post New Thread
Page 2 of 2 FirstFirst 12

Similar Threads

  1. Restricting Logons
    By Espada in forum Windows
    Replies: 2
    Last Post: 6th December 2007, 05:51 PM
  2. Restricting RIS
    By beast_gts in forum Windows
    Replies: 3
    Last Post: 28th June 2007, 09:26 PM
  3. restricting logical access
    By strawberry in forum Windows
    Replies: 1
    Last Post: 30th April 2007, 09:30 AM
  4. restricting users to only one logon
    By edie209 in forum Windows
    Replies: 17
    Last Post: 11th July 2006, 04:56 PM
  5. Restricting the use of removeable storage - do you?
    By tarquel in forum School ICT Policies
    Replies: 16
    Last Post: 10th July 2005, 04:13 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •