Jump to content

Recommended Posts

Posted

That sounds hopeful... I've done as @Tall_Paul mentioned and restricted software to just WordPad... the registry hacks were too fiddly to work with, and not really ideal for us at the time...

 

I know there are other ways of restricting software, but I use Impero to whitelist explorer.exe and wordpad.exe then they're the only things the students can use... Easy to enable/disable or schedule in advance then too based on Computers and/or usernames...

Posted
Good work!

 

The last time I looked into this we ended up just giving them a very restricted desktop and start menu with just Wordpad available.

 

This is also what I used to do. The registry key was the last thing I needed. It know works and it has been a long time since I was looking into a way to make it work.

Posted

This turns off Word's spell checking, but does it prevent students going into the options and turning it back on again?

 

I had exactly the same requirement last year for students taking exams. Managed it using Gpo to set deny permissions on a dll file that contains the office spell checking functions. Can't remember the exact dll now (will post when back in work tomorrow) but the affect was to completely disable all the spell checking features for our exam user group accounts. The office apps still work fine, even if the students try to run spell checks, they just see the spell check complete message, but nothing is actually checked, or highlighted by the check as you type feature either.

 

Because the security permissions are set for a group, it only affects the members of that group so can easily be targeted at specific exam accounts, or named student accounts if you want to take the time to add/remove them before and after each exam. I don't go that far, instead I use separate exam accounts which the students have to use. That way I can also prevent access to the students home folders, shared areas and the Internet etc.

Posted
does it prevent students going into the options and turning it back on again?

Yes. Students can't turn it back on because the relevant buttons and shortcuts keys are disabled via the following GPO.

 

  • User Configuration » Policies » Administrative Templates » Microsoft Word 2013
     
    • Disable Items in User Interface » Custom
       
      • Disable Commands
        2
        329
        790
        2349
        2469
        2566
        2705
        2788
        3217
        3219
        3958
        3997
        4025
        6111
        7343
        7387
        9056
        11323
        12842
        14453
        15780


         

      • Disable Shortcut Keys
        79,12
        84,216
        118
        118,4
        118,16


Posted
Yes. Students can't turn it back on because the relevant buttons and shortcuts keys are disabled via the following GPO.

 

  • User Configuration » Policies » Administrative Templates » Microsoft Word 2013
    • Disable Items in User Interface » Custom
      • Disable Commands
        2
        329
        790
        2349
        2469
        2566
        2705
        2788
        3217
        3219
        3958
        3997
        4025
        6111
        7343
        7387
        9056
        11323
        12842
        14453
        15780


      • Disable Shortcut Keys
        79,12
        84,216
        118
        118,4
        118,16


 

 

You said it all :) They can not switch it back on !

Posted
Good work!

 

The last time I looked into this we ended up just giving them a very restricted desktop and start menu with just Wordpad available.

 

We just used WordPad too - seemed to satisfy everyone...

  • 2 weeks later...
Posted
1. You need to install office 2010/2013 GPO Template on your server.

It's probably worth mentioning that for Office 2013, you will want to download the Office 2013 templates rather than the Office 2010 templates. :)

 

Ideally they should be copied to your Group Policy central store (\\YourDomain\sysvol\YourDomain\Policies\PolicyDefinitions) instead of the local PolicyDefinitions folder.

  • 11 months later...
Posted

I would like to say thank you for this.

After trawling the net for days trying to find a solution this was the last peice I needed to make it work and the exams officer is now happy.

  • 11 months later...
Posted (edited)

This thread has helped me massively as our school wasn't happy with the wordpad option. I do still have 1 problem though. There doesn't seem to be a gpo setting to disable "Capitalize first letter of table cells" check box. Which mean that the first letter of each paragraph will be auto corrected to be a Capital. Anyone found some sort of reg hack for this? I have googled it but can't find anything that works

 

ps I'm using word 2013, not sure if the gpo settings are different to the 2010 version

 

Thanks,

 

 

Mike

Edited by mike_ash
  • 2 weeks later...
Posted

You might need to update your GPO template to office 2013 and you should have the option.

 

I had to re do all my gpos for Word 2016 and downloaded the admx for office 2016

This thread has helped me massively as our school wasn't happy with the wordpad option. I do still have 1 problem though. There doesn't seem to be a gpo setting to disable "Capitalize first letter of table cells" check box. Which mean that the first letter of each paragraph will be auto corrected to be a Capital. Anyone found some sort of reg hack for this? I have googled it but can't find anything that works

 

ps I'm using word 2013, not sure if the gpo settings are different to the 2010 version

 

Thanks,

 

 

Mike

  • 2 months later...
Posted

We're running Office 2016 but were previously running 2010, which was completely locked down.

 

2016 has required a few extra registry keys and I'm sure these will apply to 2013 too so I thought I would share them here for anyone struggling.

 

Applied via GPP to user/group:

 

Action: Update

Hive: HKEY_CURRENT_USER

Key path: SOFTWARE\Microsoft\Shared Tools\Proofing Tools\1.0\Office

Value name: WordSpellingOptions

Value type: REG_DWORD

Value data: 0x0 (0)

Run in logged-on user's security context (user policy option) Yes

 

Action: Update

Hive: HKEY_CURRENT_USER

Key path: SOFTWARE\Microsoft\Office\16.0\word\StatusBar

Value name: SpellCheck

Value type: REG_DWORD

Value data: 0x0 (0)

Run in logged-on user's security context (user policy option) Yes

 

Action: Update

Hive: HKEY_CURRENT_USER

Key path: SOFTWARE\Microsoft\Office\16.0\word\options

Value name: AutoGrammar

Value type: REG_DWORD

Value data: 0x0 (0)

Run in logged-on user's security context (user policy option) Yes

 

Action: Update

Hive: HKEY_CURRENT_USER

Key path: SOFTWARE\Microsoft\Office\16.0\word\options

Value name: AutoSpell

Value type: REG_DWORD

Value data: 0x0 (0)

Run in logged-on user's security context (user policy option) Yes

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...