prevent users from deleting start menu items

[techie211]

hey ppl, I have a few users in a lab that can double click 'All Programs' from the Start menu and delete anything in that window. How can I prevent them from deleting anything in the All Programs via gpo?

 

Server=Win2k3

Workstation= WinXP

 

 

thanks

[powdarrmonkey]

Take away their membership of the power users and/or administrators groups

[techie211]

thanks for your reply but that didn't work.

[srochford]

Check the permissions on the folder (probably c:\documents and settings\all users\start menu\programs)

 

The group "users" should only have read access to that; if that's not the case then that's why they're able to delete stuff and you need to reset it.

 

If users can only read then look at the other groups and find out which groups do have write access; make sure that normal users are not in any of those groups.

[superfletch]

Any good?

 

GPO Editor | Relevant OU

 

user config

admin templates

start menu and taskbar

prevent changes to taskbar and start menu settings

[p858snake]

Any good?

 

GPO Editor | Relevant OU

 

user config

admin templates

start menu and taskbar

prevent changes to taskbar and start menu settings

I think you will find that is for the start menu display settings and such.

[bio]

Redirected Start Menu in the mandatory profile with appropriate permissions?

 

 

Indeed this is the way we also have configured it.. works like a charm

 

bio...

[K.C.Leblanc]

Redirected Start Menu in the mandatory profile with appropriate permissions?

 

You can also set the permissions of local profiles using a GPO.

[sippo]

Redirected Start Menu in the mandatory profile with appropriate permissions?

 

Thats the easiest way. I like it when the 'know-it-all' students try and be clever, and delete everything from the start menu...log off, then they log back in and its the same!! I've never seen so many confused faces. He he.

[superfletch]

Hi folks,

 

This is pretty much what I try to use where possible:

 

"Redirected Start Menu in the mandatory profile with appropriate permissions."

 

I'm happy with the concept of this but I seem to be getting it wrong:

 

Where do you guys keep:

 

Profile:

Start Menu:

Desktop:

 

What are your AD Settings AS FAR AS where each thing should be?

 

THANKS

 

MF

Edited March 12, 2009 by superfletch
LOSERS EAT GOATS

[oalcock]

Locate the source Start Menu Folder on the server, right click on it, go to permissions and choose for the permissions to be set so that only administrators can change the start menu settings. This is assuming you have a network set up like this, if not its recommended for security reasons. If the start menus are connected through local programs and icons, there maybe a script which I don't know I am affraid.

Hope that is some help to you!