Accessibility/ease of access tools

[Gaz]

I leave the accessibility settings turn on just in case we have a disabled student that requires them. I've found they can be used for messing settings up for uses if a student is logged on then his "mate" changes the zoom settings or such like it can be a PITA to sort out.

 

I was wondering if you guys/gals, have the accessibility settings and have any of your users ever abused them?

 

I'm considering turning them off and allowing them for certain users only upon request.

[Oaktech]

We have them turned off, and we turn them on by policy for specific users.

[ITGURU]

It would be good to know how they are completely disabled - no matter what I do, they still manage to set the login screen so that it's black and typing invisible text...then when you try to use the commands to undo it, they don't work so results in a re-image of the PC!

[Arreks]

We just set the permissions of the exe, seems to do the job.

[daveyboy]

We've replaced the exe with one of our own scripts (turned exe- password protected of course). that way we dont have to login to get certain info / webbrowser / ipaddress /etc. Edited October 13, 2015 by daveyboy

[fairm010]

That sounds interesting. What script have you used for that?

[daveyboy]

Autoit - but I suppose you could use anything that you could turn into an exe.....

[fairm010]

Would you post an example?

[daveyboy]

The poorest code in the world - I really must learn to do better. Anyways, an example for you.

 

 

 

Local $sPasswd = InputBox("Zen", "Enter your password.", "", "*")

If $sPasswd ="" Then

 

; ************** Run Imaging Agent ********************

$Zisengine = "C:\Program Files (x86)\Novell\ZENworks\bin\preboot\ZISWIN.EXE"

Run($Zisengine, "")

sleep(1000)

 

WinKill("ZENworks Imaging Windows Agent", "")

 

; ************** END Run Imaging Agent ********************

 

 

; ************** IP & COMPNAME ********************

 

Local $sPublicIP = @IPAddress1

Local $stime = @HOUR & ":" & @Min & " - " & @MDAY & "/" & @mon & "/" & @YEAR

 

$SplashBox = "IP: " & $sPublicIP & @CRLF & @CRLF & "Computer Name: " & @COMputername

 

 

SplashTextOn("", $SplashBox, 400, 170, -1,-1 , 1, -1, -1, 700)

Sleep(4000)

 

SplashOff()

 

; ************** END IP & COMPNAME ********************

 

 

; ************** ADD REGKEY & REBOOT ********************

 

 

ElseIf $sPasswd ="" Then

 

$CMD = "reg add HKLM\SOFTWARE\Novell\Authentication\NCCredProvider /v ComputerOnlyLogon /t REG_DWORD /d 1 /f"

RunWait @COMSpec & " /c " & $CMD)

 

$SplashBox ="Done"

SplashTextOn("", $SplashBox, 400, 170, -1,-1 , 1, -1, -1, 700)

Sleep(2000)

SplashOff()

 

Shutdown(6)

 

; ************** END ADD REGKEY & REBOOT ********************

 

Else

 

EndIF

[ITGURU]

i'd love to know how to stop the students doing this to the login screen if anyone can help as the shortcuts don't work to take it back to normal, as I've disabled stuff in GPO.

 

[daveyboy]

@ITGURU - I've PM'ed you.

[Manny-Tech]

About five years ago in a previous job I remember spending a while on finding a decent resolution to this for Vista. I think in the end it was a combination of things, disabling the EoA button on the logon screen, it was called utilman.exe back then, not sure if it still is. Then a registry edit to stop high contrast from being enabled. I can dig it out if necessary.

[Gaz]

Would this work?

PeteNetLive - KB0000462 - Disable "Ease of access" Settings from the Windows Logon Screen via GPO

[Oaktech]

Would this work?

PeteNetLive - KB0000462 - Disable "Ease of access" Settings from the Windows Logon Screen via GPO

 

YES!

 

That's the thing we've done here, but I've spent 2 hours trawling through GPO's and I couldn't find what I did!