LTSB 2016 - Locking down

[tri_94]

Hi there everyone

 

Have a few issues locking LSTB 2016 down.

 

Firstly is Taskview - HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowTaskViewButton - Value 0 works fine if I do this manually but as a gpo doesn't want to play for me.

 

Also would like to get rid of the network location from "File explorer"

 

And disable access to Control user account settings.

 

As the network I'm working on gives local admin rights to pupils.

 

Thanks

[Steve21]

If you really mean they have local admin rights its pretty pointless doing any of that lockdowns as they can just remove them... That should be priority one to remove really.

 

Can you copy/screenshot your GPO example here as if it works locally no reason it shouldn't be working via GPO

 

Steve

[tri_94]

attached

[Steve21]

You missed Explorer out of the path from what you said in your OP.

 

Steve

[tri_94]

Thanks for that. amended and its still not working for me.

 

You missed Explorer out of the path from what you said in your OP.

 

Steve

[timbo343]

We hide taskview with this entry... under user config

 

Hive: HKEY_CURRENT_USER

Key path: Software\Microsoft\Windows\CurrentVersion\Explorer\MultiTaskingView\AllUpView

Value name: Enabled

Value type: REG_DWORD

Value data: 0x0 (0)

 

Works for us since year 2016 and not had any issues.

[tri_94]

Thanks I’ll give that a try. I did get it working as hkey local machine instead of current user

[timbo343]

No worries. In reply to the network location, is that the buttons in the ribbon to do with map network drive and add network location? Back when we were testing we greyed them out.

[tri_94]

Yeah I’ve found an non official adm template that will do just that. And again found an non official adm to remove network now too.

[timbo343]

Sounds like you're on the right path [emoji1303]