Stop students opening 'Services' from the Windows 7 search bar

[sonic1485]

This isn't really causing too much of a problem for us - once services opens we have locked it down through group policy so they can't do anything... It's just one less thing I'd rather they didn't see.

 

I have stopped them being to type in services.msc and open it that way but they are still able to use the Windows 7 Start Menu search to simply type in services and open it.

[DaveyPitch]

It might not be how you want to do it, but we have the search bar disabled so it doesn't show any results at all when they try to search. They can still use the search bar in Explorer if they want to search for files, so we find it works well for us.

[sonic1485]

I've considered that option but it just seemed a little extreme. Just thought there might be another way. (Also I think the teachers might revolt if I get rid of their search bars - They'd have learn the actual path to open programs!)

[DaveyPitch]

Don't you have a seperate GPO for your students? You could just disable it for them and leave the search bad working for staff.

[sted]

alter permissions on services.msc su pupils are denied any access?

[BKGarry]

ours has a denied access for students on the services file itself, access to MMC is disabled in the GPOs for them, and all the shortcuts in the administrative tools folder have been set to hidden, with students not being able to find hidden files :-)

 

seems to work for us (not quite as extreme as disabling search but pretty thorough)

[Garacesh]

User Configuration\Policies\Administrative Templates\Start Menu and Taskbar\Do not search programs and Control Panel items (Enabled)

 

Should do the trick, methinks.

Edited November 12, 2013 by Garacesh

[FN-GM]

Have you turned UAC off? If so that wont help.

[DaveyPitch]

I hate UAC, I turn it off instantly when setting up a new machine.

[mavhc]

Can they start/stop any services?

[FN-GM]

I hate UAC, I turn it off instantly when setting up a new machine.

 

Well there is your problem, you should leave it on. There is no advantage in turning it off.

 

You may also fins users can find WPA keys without UAC on.

[sonic1485]

I've managed to sort it :-) Created a GPO User Config > Admin Templates > Windows Components > Microsoft Management Console > Restricted/Permitted Snap Ins and disabled services through there