User accounts & right clicking.

BoomAM · 12 Mar 2007 at 09:23

Hi.
Whats the minimum account type i can set for a user on Server 2K3 that will allow them right click access?

For the life of me, i cant find any documentation on it at all.

Thanks in advance all.

Poolybit · 12 Mar 2007 at 09:29

You could always set up a custom user group with a custom group policy and stipulate exactly what access you want them to have?

/Edit That is if you do mean domain users..

mike1210 · 12 Mar 2007 at 09:30

eh? do you mean domain user, unless policies are set they could right click with user access? Stopping user right clicking is done through group policy, or have i misunderstood. best way to prevent right clicks......give them an old Mac mouse

BoomAM · 12 Mar 2007 at 09:53

Where do i find the properties to edit that?
Ive spent hours in AD trying to find it in the past to no avail.

mike1210 · 12 Mar 2007 at 09:59

for group policy?

right click OU > properties > group policy

best thing to do is create a seperate OU called "policies" and put all your polices in there for users, computers etc

BoomAM · 12 Mar 2007 at 10:11

Ive found the group policy editor program, but theres nothing in there about right clicking?

ruffneck · 12 Mar 2007 at 11:51

If I remember its under somthing like Disable Context Menu, under user config > admin templates > windows explorer and user config > admin templates > internetexplorer somewhere

you might want to download this to help you in the future finding gp objects

http://www.petri.co.il/download_gpo_reference.htm

ruffneck · 12 Mar 2007 at 11:54

yea, just had a look at our DC

User Config > Admin Templates > Windows Explorer

Disable Windows Explorer Default Context menu

Removes shortcut menus from the desktop and Windows Explorer. Shortcut menus appear when you right-click an item.

If you enable this policy, menus do not appear when you right-click the desktop or when you right-click the items in Windows Explorer. This policy does not prevent users from using other methods to issue commands available on the shortcut menus.

mike1210 · 12 Mar 2007 at 12:33

Ruffneck, nice link cheers

matja · 12 Mar 2007 at 12:40

security-wise, per-application group policy settings = worthless

BoomAM · 12 Mar 2007 at 12:48

ruffneck said:
yea, just had a look at our DC

User Config > Admin Templates > Windows Explorer

Disable Windows Explorer Default Context menu

Removes shortcut menus from the desktop and Windows Explorer. Shortcut menus appear when you right-click an item.

If you enable this policy, menus do not appear when you right-click the desktop or when you right-click the items in Windows Explorer. This policy does not prevent users from using other methods to issue commands available on the shortcut menus.

There is no 'Windows Explorer' entry?

BoomAM · 12 Mar 2007 at 12:55

Found it.

It appears to be working now.

Thanks for the help guys/gals.

ruffneck · 12 Mar 2007 at 13:05

BoomAM · 13 Mar 2007 at 08:52

On a slightly different note, i cant find anything, but theres some sort of block preventing our staff from downloading anything, executables, documents, video, music, ect;, is that likely to be a setting in Group Policy?

Thanks in advance again everyone.

.

##EDIT##
Ive enabled 'Allow File Downloads' in all of the internet explorer sections (trusted, non trusted, protected, ect; ), but the problem persists!?
Any ideas?

BoomAM · 28 Mar 2007 at 17:24

Bump!.