prevent startup items in group policy

[browolf]

is this possible?

stopping the intel graphics system tray icon loading, the group policy equivalent of unticking it in msconfig.

[jsnetman]

Do not think so but the startup entry will be in the registry. You can delete reg entries from a startup script.

 

[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\example.exe]

Edited November 5, 2008 by jsnetman

[browolf]

Do not think so but the startup entry will be in the registry. You can delete reg entries from a startup script.

 

[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\example.exe]

 

guess I'm going to have sort out a startup script once and for all

[ChrisH]

I used a software restriction policy on the paths recently for the intel stuff. There is a setting for disabling the whole list but not individual ones.

[PiqueABoo]

You can delete reg entries from a startup script.

 

You can delete them with policy as well. If you have a GPO set a registry value "**Del.ABC" in some specific registry path, client-side GPO processing will zap the value "ABC" from that path.

 

More variations on this theme here: Registry Policy File Format (Windows)

[ricki]

HI

 

I am having the same problem at the moment and have put in path rules for these into the student lock down policy. I am not sure if its fixed it all but has helped.

 

C:\WINDOWS\Drivers\Intel\Graphics\win2000\igfxcfg.exe

Security Level Disallowed

Description block intel program

Date last modified 11/3/2008 14:54:56

 

C:\WINDOWS\Drivers\Intel\Graphics\win2000\igfxtray.exe

Security Level Disallowed

Description block intel config program

Date last modified 11/3/2008 14:44:07

 

C:\WINDOWS\System32\hkcmd.exe

Security Level Disallowed

Description disable hot keys

Date last modified 11/4/2008 14:47:10

 

C:\WINDOWS\system32\igfxcfg.exe

Security Level Disallowed

Description block intel program

Date last modified 11/3/2008 14:54:09

 

C:\WINDOWS\system32\igfxtray.exe

Security Level Disallowed

Description Block intel config program

Date last modified 11/3/2008 14:43:41

 

I dont know if it will cause other problems as I am having to stop the hotcmd.exe which stops hot keys in windows but no one has complained this week. But saying that I only deployed it on Friday last week.

 

Richard

[browolf]

HI

 

I am having the same problem at the moment and have put in path rules for these into the student lock down policy. I am not sure if its fixed it all but has helped.

 

C:\WINDOWS\Drivers\Intel\Graphics\win2000\igfxcfg.exe

Security Level Disallowed

Description block intel program

Date last modified 11/3/2008 14:54:56

 

 

 

I'm going with this method. thanks for all the suggestions tho.

[ChrisH]

C:\WINDOWS\System32\hkcmd.exe

 

The above is the main awkward one for the hotkeys. The rest just disable the right click options which is also good.

[ricki]

I have only had one complaint up to now with removing hot keys and that was from the kid who got caught the other day for flipping the screens who was complaining that he could not do it lols.

 

Richard

[speckled]

If you just want to stop the kids from using the icon why not just hide notification area in group policy? or does it go deeper than this?

[Domino]

its also providing keyboard shortcuts, hiding the notification area wouldn't be enough

[kennysarmy]

I'm going with this method. thanks for all the suggestions tho.

 

I thought software restiction policies were applied at the computer level not the user level so how are you targeting just pupils.

 

cheers

[User3204]

No, we have Software restrictions per user groups.

[steewy]

The best thing to do is to use Software restriction. Here is a video that explains how to do so. It's 16mins video but explains everything.

 

Software Restriction Policies in Windows 7