Locking down options in 'My Computer'

[mcourtman]

Hi,

 

I've joined my Windows 7 reference PC to our domain and used group policies to lock down the machine. However I've noticed that in My Computer standard domain users can highlight say the c: drive in My Computer and click the Properties button (to the right of the Organize button). They can then view the drive's properties and do terriable things such as tick the 'Compress this drive...' box.

 

I've been through GP to look for an option to remove this but cannot find anything. I have managed to find GP settings to remove the 'Uninstall or change a program' button from My Computer. I need to leave the 'New Folder' button.

 

Can anybody suggest a way to lock this option?

 

 

Also: do you guys have any other hints and tips for locking down a Windows 7 machine as our College has a few pupils who know more than they ought to!

 

Thanks, Matt

 

--------------------------------------------------------------------------------

Matt Courtman, Network Manager, Cromwell Community College, UK

[imiddleton25]

not sure about in GP but can be done in registry

 

1.Start the Registry Editor.From the Windows Start menu, select Run. In the Run box, type regedit and click OK.

2.In the Registry Editor, locate the following key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\

FileSystem

3.With the key selected, open the Edit menu, click New and then select DWORD Value.

4.In the name field for the new value, type NtfsDisableCompression.

5.Now right-click this new entry and select Modify in the popup menu.

6.Enter the value 1 and click OK.

7.Close the Registry Editor. Select Exit from the File menu.

[mcourtman]

Many thanks for your quick reply, but I was hoping of finding a way to remove the whole 'Properties' button.

 

What do other technicians in schools do? Does this cause a problem in your school?

[strawberry]

Using Group Policy Objects to hide specified drives - hide the drive, also worth installing a 2008 r2 dc so you have the w7 group policy if you dont already have one

[imiddleton25]

Disable the right click option altogether

 

Through the Group Policy Editor

 

3. In the right pane, right click on Remove Windows Explorer's default context menu and click on Edit.

4. To Enable Windows Explorer Context Menu -

A) Select (dot) either Not Configured or Disabled.

B) Go to step 6.

 

5. To Disable Windows Explorer Context Menu -

A) Select (dot) Enabled. 6. Click on OK. (

7. Close the Group Policy Editor window.