Alexkelly Posted November 26, 2009 Posted November 26, 2009 Anyone got any idea on how to disable accessability options in group policy, the kids are using keyboard shortcuts to enable high contrast and all sorts. I have searched but can seem to find any simple walkthroughs on the net.
sandeep2504 Posted November 26, 2009 Posted November 26, 2009 would this help? User Configuration\Administrative Templates\Control Panel Hides specified Control Panel items and folders. This setting removes Control Panel items (such as Display) and folders (such as Fonts) from the Control Panel window and the Start menu. It can remove Control Panel items you have added to your system, as well as Control Panel items included in Windows 2000 Professional and Windows XP Professional. To hide a Control Panel item, type the file name of the item, such as Ncpa.cpl (for Network). To hide a folder, type the folder name, such as Fonts. This setting affects the Start menu and Control Panel window only. It does not prevent users from running Control Panel items. Also, see the Remove Display in Control Panel setting in User Configuration\Administrative Templates\Control Panel\Display. If both the Hide specified Control Panel applets setting and the Show only specified Control Panel applets setting are enabled, and the same item appears in both lists, the Show only specified Control Panel applets setting is ignored. Note: To find the file name of a Control Panel item, search for files with the .cpl file name extension in the %Systemroot%\System32 directory. Note: To create a list of disallowed Control Panel applets, click Show, click Add, and then enter the Control Panel file name (ends with .cpl) or the name displayed under that item in the Control Panel. (e.g., desk.cpl, powercfg.cpl, Printers and Faxes) Note: This setting does not affect the Categories that are displayed in the new Control Panel Category view in Windows XP. If you want to control which items are displayed in Control Panel, enable the Force classic Control Panel Style setting to remove the Category view, and then use this setting to control which .cpls are not displayed.
ThePrutser Posted November 26, 2009 Posted November 26, 2009 (edited) There are indeed no policy settings to enforce these settings. You could create a custom .adm file to enforce specific registry settings. Below are the registry settings which completely disable the accessibility options, also for the default user. Windows Registry Editor Version 5.00 [HKEY_USERS\.DEFAULT\Control Panel\Accessibility] [HKEY_USERS\.DEFAULT\Control Panel\Accessibility\Blind Access] "On"="0" [HKEY_USERS\.DEFAULT\Control Panel\Accessibility\HighContrast] "Flags"="122" "High Contrast Scheme"="High Contrast Black (large)" "Volital HC Scheme"="High Contrast Black (large)" [HKEY_USERS\.DEFAULT\Control Panel\Accessibility\Keyboard Preference] "On"="0" [HKEY_USERS\.DEFAULT\Control Panel\Accessibility\Keyboard Response] "AutoRepeatDelay"="1000" "AutoRepeatRate"="500" "BounceTime"="0" "DelayBeforeAcceptance"="1000" "Flags"="122" "Last BounceKey Setting"=dword:000001f4 "Last Valid Delay"=dword:000003e8 "Last Valid Repeat"=dword:000001f4 "Last Valid Wait"=dword:000003e8 [HKEY_USERS\.DEFAULT\Control Panel\Accessibility\MouseKeys] "Flags"="58" "MaximumSpeed"="80" "TimeToMaximumSpeed"="3000" [HKEY_USERS\.DEFAULT\Control Panel\Accessibility\SerialKeys] [HKEY_USERS\.DEFAULT\Control Panel\Accessibility\ShowSounds] "On"="0" [HKEY_USERS\.DEFAULT\Control Panel\Accessibility\SoundSentry] "Flags"="2" "FSTextEffect"="0" "WindowsEffect"="0" "TextEffect"="0" [HKEY_USERS\.DEFAULT\Control Panel\Accessibility\StickyKeys] "Flags"="506" [HKEY_USERS\.DEFAULT\Control Panel\Accessibility\TimeOut] "Flags"="2" "TimeToWait"="300000" [HKEY_USERS\.DEFAULT\Control Panel\Accessibility\ToggleKeys] "Flags"="58" [HKEY_CURRENT_USER\Control Panel\Accessibility] [HKEY_CURRENT_USER\Control Panel\Accessibility\Blind Access] "On"="0" [HKEY_CURRENT_USER\Control Panel\Accessibility\HighContrast] "Flags"="122" "High Contrast Scheme"="High Contrast Black (large)" "Volital HC Scheme"="High Contrast Black (large)" [HKEY_CURRENT_USER\Control Panel\Accessibility\Keyboard Preference] "On"="0" [HKEY_CURRENT_USER\Control Panel\Accessibility\Keyboard Response] "AutoRepeatDelay"="1000" "AutoRepeatRate"="500" "BounceTime"="0" "DelayBeforeAcceptance"="1000" "Flags"="122" "Last BounceKey Setting"=dword:000001f4 "Last Valid Delay"=dword:000003e8 "Last Valid Repeat"=dword:000001f4 "Last Valid Wait"=dword:000003e8 [HKEY_CURRENT_USER\Control Panel\Accessibility\MouseKeys] "Flags"="58" "MaximumSpeed"="80" "TimeToMaximumSpeed"="3000" [HKEY_CURRENT_USER\Control Panel\Accessibility\SerialKeys] [HKEY_CURRENT_USER\Control Panel\Accessibility\ShowSounds] "On"="0" [HKEY_CURRENT_USER\Control Panel\Accessibility\SoundSentry] "Flags"="2" "FSTextEffect"="0" "WindowsEffect"="0" "TextEffect"="0" [HKEY_CURRENT_USER\Control Panel\Accessibility\StickyKeys] "Flags"="506" [HKEY_CURRENT_USER\Control Panel\Accessibility\TimeOut] "Flags"="2" "TimeToWait"="300000" [HKEY_CURRENT_USER\Control Panel\Accessibility\ToggleKeys] "Flags"="58" And the .ADM code [untested!] removed the code, need some more work to get it working this way. Stay tuned ;-) Edited November 26, 2009 by ThePrutser removed .adm code, need some cleaning 1
Alexkelly Posted November 26, 2009 Author Posted November 26, 2009 No i have looked into that already it just stops them from viewing it, it doesnt actually disable it so it wont stop them from being able to use keyboard shortcuts. Thanks for your reply anyway.
Alexkelly Posted November 26, 2009 Author Posted November 26, 2009 Thanks so what shall i do with this to enforce it on all my machines?
ThePrutser Posted November 26, 2009 Posted November 26, 2009 Well I am converting it to a .ADM file as we speak. An .ADM file can be added to a group policy so it can be applied using a policy. And other option is to import the registry settings using a logon script. It is a rather big registry file to convert to .adm, so I need a few minutes (or more)
penfold Posted November 26, 2009 Posted November 26, 2009 Your going to create a problem for students who need to change the settings for their own visual needs. You are better providing the information into how to alter settings for their own needs so when pupils go to a machine that they need to change to High Vis/ or change background colours they will know how to do it. You can also load a specific visual style or force windows classic under User config>Adm Temp>Control Panel>Display>Load a specific visual style or force windows classic.
Alexkelly Posted November 26, 2009 Author Posted November 26, 2009 To be honest with you out of the 7 years i have been her noone has ever need it, and if they did i would find a resolution to it.
penfold Posted November 26, 2009 Posted November 26, 2009 To be honest with you out of the 7 years i have been her noone has ever need it, and if they did i would find a resolution to it. There are a lot of people who dont know they've got a problem until they change the background colour and suddenly they see an improvement. I was just providing a bit more information to consider before making a blacket block.
Stuart_C Posted November 26, 2009 Posted November 26, 2009 A few found out how to turn it on then kept doing it for no other reason than to anoy those who didn't know how to turn it off. I disable the short cut as a matter of standard on all new images.
Popular Post ThePrutser Posted November 26, 2009 Popular Post Posted November 26, 2009 (edited) Although Penfold does have point there, I would still advise to use a group policy to lock down these kind of settings. Using group policy you are more flexible in appling settings to specific users or groups. Anyway, here it is. It took a while and I have done some base testing and it seems to work. Here is the exact code. CLASS USER CATEGORY "Control Panel" CATEGORY "Accessibility" POLICY "Blind Access" KEYNAME "Control Panel\Accessibility\Blind Access" VALUENAME "On" VALUEON 1 VALUEOFF 0 END POLICY POLICY !!Display KEYNAME "Control Panel\Accessibility\HighContrast" PART !!DisplaySetting DROPDOWNLIST VALUENAME "Flags" ITEMLIST NAME "Use High Contrast - on, Use Shortcut - on" VALUE 127 NAME "Use High Contrast - off, Use Shortcut - on" VALUE 126 NAME "Use High Contrast - on, Use Shortcut - off" VALUE 123 NAME "Use High Contrast - off, Use Shortcut - off" VALUE 122 END ITEMLIST END PART END POLICY POLICY !!KeyboardPreference KEYNAME "Control Panel\Accessibility\Keyboard Preference" VALUENAME "On" VALUEON 1 VALUEOFF 0 END POLICY POLICY !!FilterKeys KEYNAME "Control Panel\Accessibility\Keyboard Response" PART !!FilterKeysSetting DROPDOWNLIST VALUENAME "Flags" ITEMLIST NAME "Use Filter Keys - on, Use Shortcut - on" VALUE 127 NAME "Use Filter Keys - off, Use Shortcut - on" VALUE 126 NAME "Use Filter Keys - on, Use Shortcut - off" VALUE 123 NAME "Use Filter Keys - off, Use Shortcut - off" VALUE 122 END ITEMLIST END PART END POLICY POLICY !!MouseKeys KEYNAME "Control Panel\Accessibility\MouseKeys" PART !!MouseKeysSetting DROPDOWNLIST VALUENAME "Flags" ITEMLIST NAME "Use Mouse Keys - on, Use Shortcut - on" VALUE 63 NAME "Use Mouse Keys - off, Use Shortcut - on" VALUE 62 NAME "Use Mouse Keys - on, Use Shortcut - off" VALUE 59 NAME "Use Mouse Keys - off, Use Shortcut - off" VALUE 58 END ITEMLIST END PART END POLICY POLICY !!ShowSounds KEYNAME "Control Panel\Accessibility\ShowSounds" VALUENAME "On" VALUEON 1 VALUEOFF 0 END POLICY POLICY !!SoundSentry KEYNAME "Control Panel\Accessibility\SoundSentry" VALUENAME "Flags" VALUEON 3 VALUEOFF 2 PART !!SoundSentryVisualWarning DROPDOWNLIST VALUENAME "WindowsEffect" ITEMLIST NAME "Flash active caption bar" VALUE 1 NAME "Flash active windows" VALUE 2 NAME "Flash desktop" VALUE 3 END ITEMLIST END PART END POLICY POLICY !!StickyKeys KEYNAME "Control Panel\Accessibility\StickyKeys" PART !!StickyKeysSettings DROPDOWNLIST VALUENAME "Flags" ITEMLIST NAME "Use Sticky Keys - on, Use Shortcut - on" VALUE 511 NAME "Use Sticky Keys - off, Use Shortcut - on" VALUE 510 NAME "Use Sticky Keys - on, Use Shortcut - off" VALUE 507 NAME "Use Sticky Keys - off, Use Shortcut - off" VALUE 506 END ITEMLIST END PART END POLICY POLICY !!Autoreset KEYNAME "Control Panel\Accessibility\TimeOut" VALUENAME "Flags" VALUEON 3 VALUEOFF 2 PART !!AutoResetTimeout DROPDOWNLIST VALUENAME "TimeToWait" ITEMLIST NAME " 5 minutes" VALUE 300000 NAME "10 minutes" VALUE 600000 NAME "15 minutes" VALUE 900000 NAME "20 minutes" VALUE 1200000 NAME "25 minutes" VALUE 1500000 NAME "30 minutes" VALUE 1800000 END ITEMLIST END PART END POLICY POLICY !!ToggleKeys KEYNAME "Control Panel\Accessibility\ToggleKeys" PART !!ToggleKeysSetting DROPDOWNLIST VALUENAME "Flags" ITEMLIST NAME "Use ToggleKeys - on, Use Shortcut - on" VALUE 63 NAME "Use ToggleKeys - off, Use Shortcut - on" VALUE 62 NAME "Use ToggleKeys - on, Use Shortcut - off" VALUE 59 NAME "Use ToggleKeys - off, Use Shortcut - off" VALUE 58 END ITEMLIST END PART END POLICY END CATEGORY END CATEGORY [strings] Display=Configure High Contrast and its shortcut settings DisplaySetting=High Contrast and shortcut setting KeyboardPreference=Enable Keyboard Preference FilterKeys=Configure FilterKeys and its shortcut settings FilterKeysSetting=FilterKeys and shortcut setting MouseKeys=Configure MouseKeys and its shortcut settings MouseKeysSetting=MouseKeys and shortcut setting ShowSounds=Use ShowSounds SoundSentry=Use SoundSentry SoundSentryVisualWarning=Choose the visual warning: StickyKeys=Configure StickyKeys and its shortcut settings StickyKeysSettings=StickyKeys and shortcut setting Autoreset=Enable Automatic Reset of the accessibility AutoResetTimeout=Turn off accessibility features after idle for: ToggleKeys=Configure ToggleKeys and its shortcut settings ToggleKeysSetting=ToggleKeys and shortcut setting. Copy this code to a text file. Save this file as AccessibilityOptions.adm (or whatever name you like, make sure it ends with .adm). Then add this template to the Administrative Templates of a group policy especially for users. In the policy browse to "Control Panel" -> "Accessibility". There you should see 10 settings, if you don't then activate the Administrative Templates Hive, right click and choose "View" -> "Filtering..." (if you right click on a hyve which is not selected it will not show the "View" option!). Clear the check box for "Only show policy settings that can be fully managed". The settings should speak for them selves. I have not added any "help" sections, because I am too lazy, the settings are pretty straightforward and it would take even more time. Let me know the results or if you need some more help! Note These are not fully managed registry settings you apply using group policy. This means if you no longer want to use these settings, only removing the policy or setting the options to not configured does not change the registry back to it original setting. You would have to re-enable the default settings using this policy first, before removing the policy. Edited November 26, 2009 by ThePrutser removed attachment. .adm are not allowed even zipped :( 6
Alexkelly Posted November 26, 2009 Author Posted November 26, 2009 Thanks took a while to find it because im useing 2008, all i really needed to do was browse to classic view templates , im going to have a play and ill let you know cheers for your help.
ThePrutser Posted November 26, 2009 Posted November 26, 2009 (edited) In windows 2008 you need to look under "Classic Administrative Templates" and in the filtering turn off "Only show policy settings that can be fully managed" I attached a screenshot (made on a Windows 2008 server). In the screenshot you can also see, that I can see the specific settings. [EDIT] You probably just found it as I posted this Edited November 26, 2009 by ThePrutser
Alexkelly Posted November 26, 2009 Author Posted November 26, 2009 Brilliant thanks for you help, how did you manage to extract the key strings and values form the registry to save as a .adm file for future reference.
ThePrutser Posted November 26, 2009 Posted November 26, 2009 (edited) Well, I do have some experience in creating .adm files. As Microsoft lacks a lot of settings in the default GPO's, I got a lot of hands on experience creating .ADM files. I used the following for reference: Writing Custom ADM Files for System Policy Editor How to write custom .adm and .admx administrative template files ... How to create a custom .adm file Also looking in the already existing .adm files (not the ADMX files, those are in the new 2008/vista/7 format), gives a good idea on how .adm files work and/or are build. Futhermore there is a tool reg2adm, which takes some of the work out of your hands, but still needs a lot of afterwards editing to get a working .ADM. I also look in the registy to see in what value the registry changes when I apply a setting. And of course you can export registry settings using regedit. You then use the reg file to convert to .adm, with reg2adm. Edited November 26, 2009 by ThePrutser 4
mcloum Posted November 26, 2009 Posted November 26, 2009 We use this quite effectively. I have created a sub OU for each year group called Less restrictive. On the Year OU i enable all the settings and on the less restrictive OU i set them as pictured, i then just drop the visually impaired kids into the Less Restrictive OU. http://www.imagechicken.com/uploads/1259251657007347700.jpg
Rammie Posted March 3, 2010 Posted March 3, 2010 Many thanks to The Prutser for the ADM. We've had pupils playing with the Accessibility Option keys for some while and mostly this hasn't bothered anyone much, but recently we've noticed that they're using this strategy to (at least partly) circumvent the SynchronEyes blocking screen. The Prutser's ADM is just what I was looking for. I've created ADMs before (to force the internationalisation settings and to configure the per-user map settings in Memory Map), but I don't do it often enough to be fluent.
ranj Posted December 7, 2010 Posted December 7, 2010 Does anyone know if the high contrast and sticky keys can be disabled when the machines are sitting on thje CTRL+ALT+DEL screen. We are using Windows 7 Enterprise also would these custom ADM's work? Thanks
Stuarte Posted December 23, 2010 Posted December 23, 2010 Does anyone know if the high contrast and sticky keys can be disabled when the machines are sitting on thje CTRL+ALT+DEL screen. We are using Windows 7 Enterprise also would these custom ADM's work? Thanks Hi ranj, Same problem here. Did you try this and did it work? Cheers!
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now