Windows 7 for students

zag · January 30, 2012

We've had Windows 7 for a long time for staff but I never bothered moving the students over to it. So I have a few questions before deployment.

- Is there a group policy for getting the old login box back (at the moment it just asks for the previous users password)

- How do I set-up a mandatory profile in Windows 7? (Just put the .v2 file in the profile share?)

- Is there any way to disable students clicking on the wireless connection and disconnecting from the wireless network?

- How do I disable students browsing the "homegroup" or "entire network"

- How do I make Google the default search provider on IE9?

Cheers

FN-GM · January 30, 2012

- you can set it so it asks for a username and password for every login. Jut set it the same was as windows xp

- yep

- yep here is a group policy under taskbar I think

- there are group policy templates you can download and add to your policy I don't have a link handy right now.

- not sure I would like to know myself :-)

zag · January 31, 2012

Thanks, but how do I make the profile mandatory in windows 7?

I have studentprofile.V2 all done but there is no file to rename .man like windows xp

zag · January 31, 2012

Is there any way to disable students clicking on the wireless connection and disconnecting from the wireless network?

[fixed] UC >> Admin tools >> Start menu and task bar >> Hide the notification area

Edited January 31, 2012 by zag

zag · January 31, 2012

- Is there a group policy for getting the old login box back (at the moment it just asks for the previous users password)

[fixed] CC >> windows settings >> security settings >> local policies >> security options >> Interactive login:do not display last username

[fixed] CC >> windows settings >> security settings >> local policies >> security options >> Interactive login:do not require ctrl + alt + delete

FN-GM · January 31, 2012

Is there any way to disable students clicking on the wireless connection and disconnecting from the wireless network?
[fixed] UC >> Admin tools >> Start menu and task bar >> Hide the notification area

This is not correct that will hide all icons. This is a better one just to remvoe the network one only.

User Configurartion > Administrative Templates > Start Menu & Task Bar > Remove the networking icon.

Edited January 31, 2012 by FN-GM

FN-GM · January 31, 2012

Thanks, but how do I make the profile mandatory in windows 7?

I have studentprofile.V2 all done but there is no file to rename .man like windows xp

There should be. You may hasve to turn on view system files in the folder options to see it.

zag · February 2, 2012

Getting there....

I'm trying to move away from server profiles all together. First of all is this a good idea?

We are running on SSD clients here site wide now and logons take less than 8 seconds without a roaming or mandatory profile. I.E. Profile field left blank in AD user.

Second how to I prevent office 2010 always asking the persons name on first login? That seems to be the only niggle.

Edited February 2, 2012 by zag

FN-GM · February 2, 2012

I have a little script that you can run on login that will populate the office details. When i get home i will post it. If i dont i would have forgot so give me a nudge

If you have quick logon times like that you might as well as use local profiles.

FN-GM · February 2, 2012

Here we go. This VBS script is to be run as a logon script. It will setup the user name for office pulling the details from AD. But it think its office 2003 and 2007 not 2010 i will see if i can adapt it. it might work though.

Thanks

' Reads from AD Display Name and initials from First name and Last name.
' Writes this info into the registry for the Office username and initials.

Option Explicit

Const HKCU = &H80000001
Const HKLM = &H80000002

Dim oADSystemInfo, oADsUser, oReg
Dim sDisplayName, sInitials, sOfficeVersion, sRegKey, sPath
Dim aUsername, aInitials, aOfficeVersions
Dim iRC1, iRC2, iRet

aOfficeVersions = Array("12.0","11.0","10.0","9.0","8.0")

On Error Resume Next

' Get full username from AD
Set oADSystemInfo = CreateObject("ADSystemInfo")

' get AD user object
Set oADsUser = GetObject("LDAP://" & oADSystemInfo.UserName)

' get full name of the current user and the account name
sDisplayName = oADsUser.givenName & " " & oADsUser.SN
'sDisplayName = oADsUser.DisplayName
' Removed, JP, 24/08.06 & " (" & oADsUser.SAMAccountName & ")"


' get initials of the current user
sInitials = Left(oADsUser.givenName, 1) & Left(oADsUser.SN, 1)

' Create a byte array of the name and initials 
aUsername = ToByteArray(sDisplayName)
aInitials = ToByteArray(sInitials)
' Quit if there was an error converting to a byte array
If UBound(aUsername) = -1 Or UBound(aInitials) = -1 Then WScript.Quit

' Connect to the registry (via WMI)
Set oReg = GetObject("winmgmts:{impersonationLevel=impersonate}!\\" _
     & ".\root\default:StdRegProv")

' quit if any errors have occurred
If Err <> 0 Then WScript.Quit


' find the Office version(s) installed
For Each sOfficeVersion In aOfficeVersions

sRegKey = "SOFTWARE\Microsoft\Office\" & sOfficeVersion _
     & "\Common\InstallRoot"

iRet = oReg.GetStringValue (HKLM, sRegKey, "Path", sPath)

If iRet <> 0 Or sPath = "" Then
	'WScript.Echo "Checking 64-bit path"
	sRegKey = "SOFTWARE\Wow6432Node\Microsoft\Office\" & sOfficeVersion _
		& "\Common\InstallRoot"   
	iRet = oReg.GetStringValue (HKLM, sRegKey, "Path", sPath)
End If

  
If sPath <> "" Then
	'WScript.Echo "Updating userinfo"
	' Found an installed Office version, now update UserName value in HKCU

	If CSng(sOfficeVersion) >= 12.0 Then
		sRegKey = "SOFTWARE\Microsoft\Office\Common\UserInfo"
		
		' create the key if it doesn't exist
		oReg.CreateKey HKCU, sRegKey

		' set the UserName and Initials values using string values
		iRC1 = oReg.SetStringValue(HKCU, sRegKey, "UserName", sDisplayName)
		iRC2 = oReg.SetStringValue(HKCU, sRegKey, "UserInitials", sInitials)
	
	Else
		
		sRegKey = "SOFTWARE\Microsoft\Office\" & sOfficeVersion & "\Common\UserInfo"
		
		' create the key if it doesn't exist
		oReg.CreateKey HKCU, sRegKey

		' set the UserName and Initials values using binary values
		iRC1 = oReg.SetBinaryValue(HKCU, sRegKey, "UserName", aUsername)
		iRC2 = oReg.SetBinaryValue(HKCU, sRegKey, "UserInitials", aInitials)
	End If

End If
Next


' returns an empty array for error (the length of an empty array is -1)
Function ToByteArray(ByVal sString)
  Dim iIndex, iPos

  ' return an empty array if a sString is not a string
  If VarType(sString) <> vbString Then 
     ToByteArray = Array()
     Exit Function
  End If

  ReDim aBytes(Len(sString) * 2 + 1)

  iIndex = -1
  For iPos = 1 To Len(sString)
    iIndex = iIndex + 1
    aBytes(iIndex) = Asc(Mid(sString, iPos, 1))
    ' add a 0 after each letter
    iIndex = iIndex + 1
    aBytes(iIndex) = 0
  Next

  ' add two closing 0's
  iIndex = iIndex + 1
  aBytes(iIndex) = 0
  iIndex = iIndex + 1
  aBytes(iIndex) = 0

  ToByteArray = aBytes
End Function

zag · February 3, 2012

Brilliant stuff.

Here is the Office 2010 Reg key, maybe its simpler now?

Disabling "Please enter your full name and initials below"

zag · February 10, 2012

Anyone know how to disable Powershell for students?

I ran a little "hackathon" with a few ict prefects today and they found a way to access powershell from the search box on the start menu. Clever kids!!

cromertech · February 10, 2012

Second how to I prevent office 2010 always asking the persons name on first login? That seems to be the only niggle.

I redirected the appdata. This prevented it asking everytime. It does still ask on first log in. This gave another problem though with a security error when launching from the task bar but adding the unc to the appdata folder to trusted sites sorted that one out.

enjay · February 10, 2012

We moved to Windows 7 for everyone in the summer - our setup isn't perfect by any measure, but you're welcome to come have a look if you want.

FN-GM · February 10, 2012

Anyone know how to disable Powershell for students?

I ran a little "hackathon" with a few ict prefects today and they found a way to access powershell from the search box on the start menu. Clever kids!!

Its actually disabled by default and you need to be an admin to enable it

zag · February 22, 2012

I have a registry file to remove favorites, homegroup, browse network and libraries from the explorer toolbar.

But it needs to set Full control permissions to the registry key first.

I can do this manually but its a bit of a pain.

Does anyone know how to set permissions using a .reg file?

Windows 7 Registry Hacks for Students.zip

FN-GM · February 22, 2012

I have a registry file to remove favorites, homegroup, browse network and libraries from the explorer toolbar.

But it needs to set Full control permissions to the registry key first.

I can do this manually but its a bit of a pain.

Does anyone know how to set permissions using a .reg file?

[ATTACH]13157[/ATTACH]

Have a google around there are GPO to remove all these.

Arthur · February 22, 2012

SetACL or SubInACL can both be used to modify registry permissions. The GPO method sounds easier though.

@echo off
SetACL -on "HKLM\Software\Classes\CLSID\{323CA680-C24D-4099-B94D-446DD2D7249E}\ShellFolder" -ot reg -actn ace -ace "n:S-1-5-32-544;p:full;s:y"
SetACL -on "HKLM\Software\Classes\{B4FB3F98-C1EA-428d-A78A-D1F5659CBA93}\ShellFolder" -ot reg -actn ace -ace "n:S-1-5-32-544;p:full;s:y"
SetACL -on "HKLM\Software\Classes\{031E4825-7B94-4dc3-B131-E946B44C8DD5}\ShellFolder" -ot reg -actn ace -ace "n:S-1-5-32-544;p:full;s:y"
SetACL -on "HKLM\Software\Classes\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\ShellFolder" -ot reg -actn ace -ace "n:S-1-5-32-544;p:full;s:y"

zag · February 22, 2012

Have a google around there are GPO to remove all these.

I don't think there is to be honest. I searched for hours this morning looking for it.

For homegroup in the file explorer toolbar there is a registry setting or you can disable the homegroup services.

For network browsing in the file explorer toolbar there is a registry setting or another service you can disable.

Those are the 2 most import to me and I checked all the Microsoft groups where they state there are no gpo options.

FN-GM · February 22, 2012

I don't think there is to be honest. I searched for hours this morning looking for it.

For homegroup in the file explorer toolbar there is a registry setting or you can disable the homegroup services.
For network browsing in the file explorer toolbar there is a registry setting or another service you can disable.

Those are the 2 most import to me and I checked all the Microsoft groups where they state there are no gpo options.

I am 100% sure there is because i have used them. They are not offical MS ones but they are better than messing about with the registry.

Here we go i have attached one for you

remove network icon.zip

Edited February 22, 2012 by FN-GM

enjay · February 22, 2012

Do you need to disable them? We have redirected Favourites to a central folder (although I do want to make it personal, when I have a chance to look at that); Libraries is present and points to the user's redirected MyDocs folder which seems sensible enough. HomeGroup is not present, but I don't know how it was disabled - I can check if you want though.

FN-GM · February 22, 2012

Do you need to disable them? We have redirected Favourites to a central folder (although I do want to make it personal, when I have a chance to look at that); Libraries is present and points to the user's redirected MyDocs folder which seems sensible enough. HomeGroup is not present, but I don't know how it was disabled - I can check if you want though.

Homegroup wont show when joined to a domain. But the network icon will still show.

zag · February 22, 2012

I am 100% sure there is because i have used them. They are not offical MS ones but they are better than messing about with the registry.

Here we go i have attached one for you

You sir.... are a Genious!! Edugeek to the rescue yet again

Works perfectly thanks. And you are correct the homegroup doesn't show on the domain logins.

What are your guys opinions on the favorites icon at the top of file explorer? Is it worth trying to disable?

JJonas · February 22, 2012

I am 100% sure there is because i have used them. They are not offical MS ones but they are better than messing about with the registry.

Here we go i have attached one for you

Thats great!

er where do we get the rest of them?

zag · February 22, 2012

Nearly there now:

Just for my own use or any comments

Launch Powershell [unsolved but scripts have been disabled so useless]

Disable IE "in private browsing" [solved with gpo]

Download exe [solved with web filter]

Remove Browse homegroup [solved with domain attach]

Allocate printers [still to be decided]

Remove browse network [solved with custom gpo]

Remove "favorite" link in file explorer [Ok to keep?]

Remove libraries in file explorer [Ok to keep?]

IE "Set wallpaper background" [bginfo still working?]

Switch user [solved with gpo]

Lock user [solved with gpo]

Edited February 22, 2012 by zag

Windows 7 for students

Recommended Posts

zag

FN-GM

zag

zag

zag

FN-GM

FN-GM

zag

FN-GM

FN-GM

zag

zag

cromertech

enjay

FN-GM

zag

FN-GM

Arthur

zag

FN-GM

enjay

FN-GM

zag

JJonas

zag

Create an account or sign in to comment

Create an account

Sign in

Recent Threads

Sage 200 budget holders - test something for me?

Bromcom Support

My Fluke LinkRunner has a fault...

Home

Forums

What's New