Hello Everyone,
As most of you are aware Windows 10 is a massive pain to lock down properly. There are countless missing group policy settings that would be useful to have, that Microsoft could implement. Also I noticed that some of the group policy settings haven't been updated to work properly with windows 8 & 10.
For example, this policy 'User Config > Policies > Administrative Templates > Windows Components/File Explorer and set the 'Do not allow Folder Options to be opened from the Options buttons on the View tab of the ribbon' will successfully disable the Folder Options box but users will have full access to enable or disable 'Item check boxes' 'File name extensions' Hidden items' and 'Hide selected items' via the View tab on the Ribbon UI.
The main reason why I wanted to disable access to folder options was to prevent users from being able to change these options, yet that policy will allow users to show/hide them via the view tab. It's crazy!
I came across this post that explains how to 'grey out' anything on the ribbon UI: Server 2012/Windows 8 – Ribbon UI: Disable Icons, Buttons, Shortcuts, Tasks, and Commands | Paper Street Online
However this requires editing locked registry keys, great! Some of you may know that you cannot modify locked registry keys easily and you have to change the ownership of the keys to enable you to modify them. There is a exe tool that is mentioned here: Batch Script – Ribbon UI Customization: Take Ownership and Change Permissions of the CommandStore Subkeys in the Registry | Paper Street Online that enables you to unlock registry keys however I couldn't get it to work properly.
In frustration I gave up and tried to come up with another solution to disable the show/hide section in the view tab. I remembered that ADM/ADMX (group policy files/templates) has full access to modify/edit the system and locked registry keys, So I decided to create my own custom adm template.
After days of work and testing I have made a template that will disable (grey out) pretty much anything on the ribbon UI. Including the View > show/hide section YAY!
Please be aware that this only greys out things in the ribbon UI. For example, say you disabled the delete button using my ADM template. It will not disable delete in any other way meaning the user could still right click and press delete or use any keyboard shortcuts to delete the file. So please bare this in mind. Always check group policy to see if there is an official way to disable something before using my ADM template as that is always the best way to go.
As everyone's system is different and I can't test on all of your systems (obviously) I have to write this as a little disclaimer:
I accept no responsibility for any loss or damage caused to the OS. Use at your own risk!
Big Thanks to Paper Street Online for information on registry keys to edit/add: Server 2012/Windows 8 – Ribbon UI: Disable Icons, Buttons, Shortcuts, Tasks, and Commands | Paper Street Online
Windows 8 & 10 Ribbon Customiser.zip