Ribbon Bar

[Chuckster]

I have searched high and low but my Google-fu is weak.

 

Is there any way I can hide or disable the checkboxes File name extensions and Hidden items under the View ribbon tab?

[3s-gtech]

Yes. It is a beast of job to find and track them down.

 

Unzip, open it in a browser and it'll show you the settings directly from my GP. Replicate for you own domain. This is tested working in Windows 8.1 and Windows 10.

 

Please let me know if I've left anything untoward in here!

 

Hidden items checkbox.zip

[FragglePete]

I have searched high and low but my Google-fu is weak.

 

Is there any way I can hide or disable the checkboxes File name extensions and Hidden items under the View ribbon tab?

 

See my blog entry here: Windows 10 File Explorer Ribbon UI - Blogs - EduGeek.net

I have a step on the MDT Task Sequence that adjusts the necessary registry items permissions that then enables you to tweak the ribbon bar with GPP registry tweaks dependant on the user. Why Microsoft won't let you fully adjust the Ribbon UI via GPO as you could beforehand is beyond me!

 

Pete

[Chuckster]

See my blog entry here: Windows 10 File Explorer Ribbon UI - Blogs - EduGeek.net

I have a step on the MDT Task Sequence that adjusts the necessary registry items permissions that then enables you to tweak the ribbon bar with GPP registry tweaks dependant on the user. Why Microsoft won't let you fully adjust the Ribbon UI via GPO as you could beforehand is beyond me!

 

Pete

 

@FragglePete, in your blog entry you mention the regperms.bat file. However, you haven't listed the contents in it. Any chance you could put this up?

[FragglePete]

This is just really the name of the file that I use, but it's contents are here:

 

:: Server 2012 Ribbon UI Registry Permissions Tweak
::
:: In order to enable the use of Group Policy Preferences to be able to modify registry
:: keys so we can disable items in the Ribbon UI toolbar, we must first use a third party
:: application "SetACL.exe" to do a few things. First, we need to take ownership from the
:: "NT SERVICE\TrustedInstaller" local account. After that, we can then grant the local 
:: "SYSTEM" account write access to the subkeys so that our GPP will work. The last step
:: of this script will then set the owner back to the TrustedInstaller account. This 
:: script will obviously need to be ran as administrator.
::
:: SetACL.exe can be found here - [url]https://helgeklein.com/download/[/url]#
:: Place SetACL.exe in the same directory as this script
::
:: Author: Nathan Thomas
:: Date: 04/22/2015
 @echo ON
:: Recommended - Backup the registry permissions first? yes|no
SET BackupReg=yes
IF %BackupReg%==yes (
REM "%~dp0" Is an environment variable that gets the full path to the current batch file's directory.
"%~dp0"SetACL.exe -on "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\CommandStore\shell" -ot reg -actn list -lst "f:sddl" -bckp "DefaultCSPermissions.txt" -rec yes
)
:: FYI - To restore the backup, you will have to take ownership and have write permissions
:: SetACL.exe -on "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\CommandStore\shell" -ot reg -actn restore -bckp "DefaultCSPermissions.txt"
:: This will change ownership to the Administrators group recursively
"%~dp0"SetACL.exe -on "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\CommandStore\shell" -ot reg -actn setowner -ownr "n:Administrators" -rec yes
:: This will give full control to administrators and the "SYSTEM" account
"%~dp0"SetACL.exe -on "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\CommandStore\shell" -ot reg -actn ace -ace "n:Administrators;p:full" -ace "n:SYSTEM;p:full" -rec yes
:: This will change ownership back to the local "NT SERVICE\TrustedInstaller" account
"%~dp0"SetACL.exe -on "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\CommandStore\shell" -ot reg -actn setowner -ownr "n:NT SERVICE\TrustedInstaller" -rec yes
:: This will set the owner of the shell key itself back to the "SYSTEM" account
"%~dp0"SetACL.exe -on "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\CommandStore\shell" -ot reg -actn setowner -ownr "n:SYSTEM"
:: Added by PIW
:: The following does the same as above but in the registry area where elements of the Explorer (Network Locations)
"%~dp0"SetACL.exe -on "HKEY_CLASSES_ROOT\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\ShellFolder" -ot reg -actn setowner -ownr "n:Administrators" -rec yes
"%~dp0"SetACL.exe -on "HKEY_CLASSES_ROOT\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\ShellFolder" -ot reg -actn ace -ace "n:Administrators;p:full" -ace "n:SYSTEM;p:full" -rec yes
"%~dp0"SetACL.exe -on "HKEY_CLASSES_ROOT\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\ShellFolder" -ot reg -actn setowner -ownr "n:NT SERVICE\TrustedInstaller" -rec yes
"%~dp0"SetACL.exe -on "HKEY_CLASSES_ROOT\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\ShellFolder" -ot reg -actn setowner -ownr "n:SYSTEM"
:: Quick Access within File Explorer
"%~dp0"SetACL.exe -on "HKEY_CLASSES_ROOT\CLSID\{679f85cb-0220-4080-b29b-5540cc05aab6}\ShellFolder" -ot reg -actn setowner -ownr "n:Administrators" -rec yes
"%~dp0"SetACL.exe -on "HKEY_CLASSES_ROOT\CLSID\{679f85cb-0220-4080-b29b-5540cc05aab6}\ShellFolder" -ot reg -actn ace -ace "n:Administrators;p:full" -ace "n:SYSTEM;p:full" -rec yes
"%~dp0"SetACL.exe -on "HKEY_CLASSES_ROOT\CLSID\{679f85cb-0220-4080-b29b-5540cc05aab6}\ShellFolder" -ot reg -actn setowner -ownr "n:NT SERVICE\TrustedInstaller" -rec yes
"%~dp0"SetACL.exe -on "HKEY_CLASSES_ROOT\CLSID\{679f85cb-0220-4080-b29b-5540cc05aab6}\ShellFolder" -ot reg -actn setowner -ownr "n:SYSTEM"
PING 127.0.0.1

 

This I have located in my Scripts directory on my MDT Server and is called on the task sequence with the following:

cmd.exe /c "%ScriptRoot%\regperms.bat"

This is a 'Run Command Line' that I have in a bunch of Custom Tasks that run after the 'Install Applications' part.

 

Hope that makes sense

 

Pete

[jacobjb]

Hi Chuckster,

 

My Windows 8 & 10 Ribbon Customizer ADM will help you resolve this issue.

 

Regards,

Jacob