| Savis - Jun-07-2005 server time |
| BOOMB BABY!!!! [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\ShellFolder] "Attributes"=dword:00100000 [HKEY_LOCAL_MACHINE\SOFTWARE\Clients\IM\Windows Messenger\InstallInfo] "IconsVisible"=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\Clients\Mail] @="" [HKEY_LOCAL_MACHINE\SOFTWARE\Clients\Mail\Outlook Express\InstallInfo] "IconsVisible"=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet] @="" [HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\InstallInfo] "IconsVisible"=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}] "IsInstalled"=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] "IsInstalled"=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FB5F1910-F110-11d2-BB9E-00C04F795683}] "CLSID"="!{1FBA04EE-3024-11D2-8F1F-0000F87ABD16}" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Oc Manager\Subcomponents] "ieaccess"=dword:00000000 "oeaccess"=dword:00000000 "wmaccess"=dword:00000000 now im just gona create a VBS file to set all that on login wich is fine since im applying the login script to the group... |
| Savis - Jun-07-2005 server time |
| that is all i wish to do is disable / hide the icons but i want to be able to do this through changeing access default settings in GPO hehe i dont know if there is an option to control the options in that through gpo |
| Cold Drink - Jun-07-2005 server time |
| Seems all you can do with it is hide/disable it: http://support.microsoft.com/?id=328326#6 Like Red says, sorry to say but I think your best bet is to push applications/scripts on and perform the changes that way or use RemoteRegistry. You don't need to do it with login scripts though. This seems pretty handy: http://www.sysinternals.com/Utilities/PsExec.html |
| Red Squirrel - Jun-07-2005 server time |
| Though instead of a login script you can push it directly on. I don't know of any programs that can do this to many machines at once but I'm sure there's some. Basically it would drop the required files on c$ and add a silent setup script in a special registry key to make it run. I think this is how programs like mcafee EPO work push the AV to all the machines. |
| Savis - Jun-07-2005 server time |
| Basicley the way I didnt want to do this hehehe (Login Script .bat .vbs .reg) The desktop icon is also handeld with the Group Policy Object (Atleast that is how I did it) So there is no way to control "Set Program Access and Default" through Group Policy Object? |
| Red Squirrel - Jun-07-2005 server time |
| Wow, and where I work, we have to deploy IE instead of firefox. For the desktop, that's in the registry somewhere as it's not a "real" icon. For the quick launch, it's in the application data folder. So easiest would be to push a small application that would set the registry change and delete the icon. A batch file with a .reg file would do the trick. |
| Savis - Jun-07-2005 server time |
| Ok let me describe a little bit what I am searching for.. 1st I currently have a Windows 2003 Server running a domain controller (AD) from which I use to control group policy across specific groups and deploying software and settings to connecting clients on the domain. Where I have run in to a issue is trying to figure out the best way to remove Internet Explorer icons from the start menu and the quick launch since I chose to deploy Mozilla Firefox as our primary internet browser. (There already is a setting to remove it from the desktop). I’m sure we can implement a registry change in a login script (Prefer not to use login scripts). Or possibly implement a login script that removes the IE links from the directory’s (Again prefer not using login scripts). What I would really like to do is figure out if there is away to control the "Set Program Access and Defaults" through GPO (Group Policy Object) If so this would be my preferred way of controlling what applications are for what usage. Goal: Remove all Internet Explorer and Outlook Express Icons visible to users on the domain. Any help on this would be greatly appreciated. Thank you Savis |