Group Policy for disabling right click on system tray

I need to disable the right click ability. There are several system tray icons which allow the user to change display properties and other such like which they aren't allowed to have access to.

Right click is disabled for desktop and the taskbar but they can still right click on the system tray icons.
 
i think our Domain Policy has managed this for our customers servers

ill double check when i get into work 2morrow for you.
 
just checked now. our domain policy is tied down tight as a nut and is rolled out on customer servers across the country (we've sold thousands of them) and they're all allowing right click on the system tray icons

dont think its possible. May even be a bug that the GPO is supposed to restrict it but doesnt.
 
What can they do with sys tray icons that you dont want them to be able to? Maybe you should look at making things not appear in the sys tray even to start with. Might be easier?
 
Heh, like the work computer i'm on now, some admins go way over the top and disable everything, so when something goes wrong..

Me: "yeh i can fix it mate, easy"
..."oh wait, everythings disabled"

.."no I.T. guy here? He's 100 miles away in Leeds? oh well they know best.."
 
IAmATeaf said:
No idea if this will help http://www.experts-exchange.com/OS/Miscellaneous/Q_21032197.html
Click to expand...
As iamateaf has mentioned, you can disable the right click options.

You can also remove the icons completely using this reg hack:
Code: 
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoTrayItemsDisplay"=dword:00000001

Of course, adding this assumes the user has the privs to edit the registry. It leaves the clock there in the corner as normal.
 
V3g3tto said:
Heh, like the work computer i'm on now, some admins go way over the top and disable everything, so when something goes wrong..

Me: "yeh i can fix it mate, easy"
..."oh wait, everythings disabled"

.."no I.T. guy here? He's 100 miles away in Leeds? oh well they know best.."
Click to expand...

The logic behind that is... If a user doesn't have access, then he/she can't break anything... however, as you say, then it makes it more difficult for an administrator to fix things (unless you have things either configured properly - which takes more time and planning), or you have good - or in your case closer! - administrators...
 
pendulum666 said:
What can they do with sys tray icons that you dont want them to be able to? Maybe you should look at making things not appear in the sys tray even to start with. Might be easier?
Click to expand...

They can right click them and get to the sub menu.

I recently had someone sat at the PC and they flipped the display on a 180 rotate. The next person to use it got peed off it happened.

But there are other tray icons which can be affected, such as VNC so we can get on the PC, plus the Zyxel configuration page too.

Can't seem to find any options to "remove system tray icons"
 
.walls said:
The logic behind that is... If a user doesn't have access, then he/she can't break anything... however, as you say, then it makes it more difficult for an administrator to fix things (unless you have things either configured properly - which takes more time and planning), or you have good - or in your case closer! - administrators...
Click to expand...

We did have an office based IT manager who knew his stuff, but they said he breached contract for having a design business on the side, so he left.

I'd apply for it but my server experience in limited and i don't have MCSA,etc (IT degree is pants hehe).

Yeh i agree with what you're saying though, i wouldn't let idiots mess with settings either, a bored admin person can cause havoc.

However, a guest admin/power account would be nice when there's problems, because 9/10 i can sort it. Saying that i can get around pretty much all the security on most systems simply at boot, but that would really get me the sack hehe.

I should be mentioning this to my manager and not you shouldn't i...lol :D
 
V3g3tto said:
We did have an office based IT manager who knew his stuff, but they said he breached contract for having a design business on the side, so he left.

I'd apply for it but my server experience in limited and i don't have MCSA,etc (IT degree is pants hehe).

Yeh i agree with what you're saying though, i wouldn't let idiots mess with settings either, a bored admin person can cause havoc.

However, a guest admin/power account would be nice when there's problems, because 9/10 i can sort it. Saying that i can get around pretty much all the security on most systems simply at boot, but that would really get me the sack hehe.

I should be mentioning this to my manager and not you shouldn't i...lol :D
Click to expand...

Why not apply for it? What have you got to lose?

Seriously - the absolute worst that can happen is that they will say no. The best that can happen is they will say yes - in which case, you get to fill your wallet, polish your skills and CV all at the same time!
 
If the sys tray icon isn't needed then why is it on systems in the first place?

That'd be my way of thinking, maybe use software restriction policies on normal user accounts to stop things starting so that they are still there for admin accounts, although I'd question the need for them even then when you can go into control panel to do everything.
 
You must log in or register to reply here.
Back
Top Bottom