[1607, au] Remove permissions to admin tools during os deployment

[jslate1980]

Hi

Any clever people on here, got a way to hide or change permissions to remove the admin tools folder and powershell folder from the start menu during os deployment? Currently using sccm and thought of using icalcs command script but that’s as far as I have got.

 

Jon

[jslate1980]

Hi

Any clever people on here, got a way to hide or change permissions to remove the admin tools folder and powershell folder from the start menu during os deployment? Currently using sccm and thought of using icalcs command script but that’s as far as I have got.

 

Jon

 

Worked it out in the end.

 

Created a batch script that runs in the task sequence to hide the files in default profile.

attrib "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Steps Recorder.lnk" +s +r +h
attrib "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Fax and Scan.lnk" +s +r +h
attrib "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk" +s +r +h
attrib "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Ease of Access" +s +r +h
attrib "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Settings.lnk" +s +r +h
attrib "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Immersive Control Panel.lnk" +s +r +h
attrib "C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility" +s +r +h
attrib "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools" +s +r +h
attrib "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools" +s +r +h
attrib "C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell" +s +r +h
attrib "C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk" +s +r +h
attrib "C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Devices.lnk" +s +r +h
attrib "C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk" +s +r +h
attrib "C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Default Programs.lnk" +s +r +h
attrib "C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk" +s +r +h
attrib "C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\Control Panel.lnk" +s +r +h
attrib "C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\Task Manager.lnk" +s +r +h
attrib "C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\run.lnk" +s +r +h
attrib "C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3" +s +r +h
attrib "C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Compressed (zipped) folder.lnk" +s +r +h
attrib "C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Fax recipient.lnk" +s +r +h
attrib "C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Mail recipient.lnk" +s +r +h