Jump to content

Recommended Posts

Posted

@elsiegee40 - This tool only provides lots of links in a single place for existing control pannel applets. These are still locked out in the smae way with group policy so if your system is already locked down for this then they will still be limited by policy.

 

As the users should be limited users anyway even without any further restrictions they should only be able to change little things that affect thir profile only, these features are easily blockable in GP.

 

As to the credentials prompt, this is standard behaviour for Windows 7 if it runs up against a UAC prompt in limited user mode and is quite handy if you need to change something in their profile directly. This would only result in locked out admin accounts if they know that the admin username was. This is one of the reasons to change the default administrator logon name as even this can get locked out by students attempting to log on to it directly if precautions are not taken.

  • Thanks 1
Posted
Btw this works in Vista too ;)

 

Edit: though I have read it doesn't work in Vista x64 - not sure about W7 x64, will try it in a bit.

 

Just tried it on Win7 x64. It works.

 

Nice tip, this is the dog's danglies :)

Posted

As to the credentials prompt, this is standard behaviour for Windows 7 if it runs up against a UAC prompt in limited user mode and is quite handy if you need to change something in their profile directly. This would only result in locked out admin accounts if they know that the admin username was. This is one of the reasons to change the default administrator logon name as even this can get locked out by students attempting to log on to it directly if precautions are not taken.

 

Unless you've changed things, you can't lock out the administrator account (SID ending -500) - I think that this is done in part to protect you against DOS attacks.

 

There are lots of other things a user could do get prompted with a username/password box - just try connecting to the admin share on a remote machine, for example - and a malicious user could lock out any account with this (not just administrator accounts)

 

Changing the number of bad passwords allowed before an account is locked out can be a good idea. I've read suggestions that you can set it to a huge number (>100) - this is the sort of number which will defeat an automated attack (just going through an entire dictionary) but won't cause a problem for a user who's forgotten their password and is trying each of the passwords they regularly use and will probably also mean a "bad" person will get bored before the account locks out.

 

Any changes that users can make (eg display settings) should be specific to that user; logging on as another user will get things back to normal and if your users have mandatory profiles then even their personal changes will be cleared up at logoff.

Posted

Windows 7 God Mode List [and their associated functions]

 

[Also note that some users have reported problems when using some of these shortcuts, especially on systems running Windows Vista 64-bit. Please don't try these shortcuts on any mission critical system!]

 

Action Center

{BB64F8A7-BEE7-4E1A-AB8D-7D8273F7FDB6}

Backup and Restore

{B98A2BEA-7D42-4558-8BD1-832F41BAC6FD}

Biometric Devices

{0142e4d0-fb7a-11dc-ba4a-000ffe7ab428}

Credential Manager

{1206F5F1-0569-412C-8FEC-3204630DFB70}

Default Location

{00C6D95F-329C-409a-81D7-C46C66EA7F33}

Devices and Printers

{A8A91A66-3A7D-4424-8D24-04E180695C7A}

Display

{C555438B-3C23-4769-A71F-B6D3D9B6053A}

HomeGroup

{67CA7650-96E6-4FDD-BB43-A8E774F73A57}

Location and Other Sensors

{E9950154-C418-419e-A90A-20C5287AE24B}

Notification Area Icons

{05d7b0f4-2121-4eff-bf6b-ed3f69b894d9}

Recovery

{9FE63AFD-59CF-4419-9775-ABCC3849F861}

RemoteApp and Desktop Connections

{241D7C96-F8BF-4F85-B01F-E2B043341A4B}

Speech Recognition

{58E3C745-D971-4081-9034-86E34B30836A}

Troubleshooting

{C58C4893-3BE0-4B45-ABB5-A63E4B8C8651}

 

Link: The ultimate 'God Mode' list: 39 secret Windows 7 shortcuts | Ed Bott’s Microsoft Report | ZDNet.com

 

For Windows Vista and later:

 

[Also note that some users have reported problems when using some of these shortcuts, especially on systems running Windows Vista 64-bit. Please don't try these shortcuts on any mission critical system!]

Administrative Tools

{D20EA4E1-3957-11d2-A40B-0C5020524153}

All .NET Frameworks and COM Libraries

{1D2680C9-0E2A-469d-B787-065558BC7D43}

All Tasks (Control Panel)

{ED7BA470-8E54-465E-825C-99712043E01C}

AutoPlay

{9C60DE1E-E5FC-40f4-A487-460851A8D915}

BitLocker Drive Encryption (Ultimate edition only)

{D9EF8727-CAC2-4e60-809E-86F80A666C91}

Computer Folder

{20D04FE0-3AEA-1069-A2D8-08002B30309D}

Default Programs

{17cd9488-1228-4b2f-88ce-4298e93e0966}

Ease of Access Center

{D555645E-D4F8-4c29-A827-D93C859C4F2A}

Font Settings

{93412589-74D4-4E4E-AD0E-E0CB621440FD}

Get Programs

{15eae92e-f17a-4431-9f28-805e482dafd4}

Manage Wireless Networks

{1FA9085F-25A2-489B-85D4-86326EEDCD87}

Network and Sharing Center

{8E908FC9-BECC-40f6-915B-F4CA0E70D03D}

Network Connections

{7007ACC7-3202-11D1-AAD2-00805FC1270E}

Network Folder

{208D2C60-3AEA-1069-A2D7-08002B30309D}

Parental Controls

{96AE8D84-A250-4520-95A5-A47A7E3C548B}

Performance Information and Tools

{78F3955E-3B90-4184-BD14-5397C15F1EFC}

Personalization

{ED834ED6-4B5A-4bfe-8F11-A626DCB6A921}

Power Options

{025A5937-A6BE-4686-A844-36FE4BEC8B6D}

Programs and Features

{7b81be6a-ce2b-4676-a29e-eb907a5126c5}

Sync Center

{9C73F5E5-7AE7-4E32-A8E8-8D23B85255BF}

System

{BB06C0E4-D293-4f75-8A90-CB05B6477EEE}

User Accounts

{60632754-c523-4b62-b45c-4172da012619}

Windows Firewall

{4026492F-2F69-46B8-B9BF-5654FC07E423}

Windows SideShow (Warning, caused my system to slow down briefly)

{E95A4861-D57A-4be1-AD0F-35267E261739}

Windows Update

{36eef7db-88ad-4e81-ad49-0e313f0c35f8}

 

Link: The ultimate 'God Mode' list: 39 secret Windows 7 shortcuts | Ed Bott’s Microsoft Report | ZDNet.com

  • 2 weeks later...
  • 1 year later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...