none
Disable address bar windows explorer per User

    Question

  • Hello all,

    I'm having a little bit of a problem, we have a windows server 2012 r2 on which users logon.

    What we have currently in place is a GPO not authorizing a certain user to use all of the drives (prevent access, and hide drives)

    however if the user opens Windows explorer and types cmd.exe in the address bar cmd starts and he can use it.

    Is there a way to disable the address bar for this specific user but leave it for others through GPO?

    i've read on this link but it doesn't seem to work because the registry key is no longer nammed the same,

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser]
    "ITBar7Layout" (7 added) and the value is completly different from the original value.


    • Edited by RFU Thursday, October 22, 2015 9:22 AM spelling
    Thursday, October 22, 2015 8:27 AM

Answers

  • > I'm having a little bit of a problem, we have a windows server 2012 r2
    > on which users logon.
     
    Yes, users logging on to 2012R2 indeed is a little bit of a problem :-)))
     
    > however if the user opens Windows explorer and type cmd.exe in the
    > address bar cmd starts and he can use it,
     
     
    Funny enough, but this will also prevent entering whatever path in
    explorer address bar.
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    • Marked as answer by RFU Thursday, October 22, 2015 9:20 AM
    Thursday, October 22, 2015 8:41 AM
  • however on the server, even after i log off log on it is not applied, i suppose a server restart is necessary for it to apply even if it is a user policy?

    Are you unblocked on this?
     
    If not yet, to troubleshoot it, I'd suggest to run "Gpresult /h C:\result.html" on the machine. It will show you details on what Group Policy Objects have been applied and their settings.
     
    (The GPResult output will also show you the winning GPO with loopback enabled)
     

    Regards,

    Ethan Hua


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com

    Friday, October 23, 2015 7:13 AM
    Moderator

All replies

  • > I'm having a little bit of a problem, we have a windows server 2012 r2
    > on which users logon.
     
    Yes, users logging on to 2012R2 indeed is a little bit of a problem :-)))
     
    > however if the user opens Windows explorer and type cmd.exe in the
    > address bar cmd starts and he can use it,
     
     
    Funny enough, but this will also prevent entering whatever path in
    explorer address bar.
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    • Marked as answer by RFU Thursday, October 22, 2015 9:20 AM
    Thursday, October 22, 2015 8:41 AM
  • > I'm having a little bit of a problem, we have a windows server 2012 r2
    > on which users logon.
     
    Yes, users logging on to 2012R2 indeed is a little bit of a problem :-)))
     

    I explained it incorrectly, they are not directly logging on to the server, just using a program from the server that needs a user connection

    The GPO given worked for my test computer giving me the error message "accessing the resosurce is not allowed", however on the server, even after i log off log on it is not applied, i suppose a server restart is necessary for it to apply even if it is a user policy?

    thank you for your help

    Thursday, October 22, 2015 9:20 AM
  • > "accessing the resosurce is not allowed", however on the server, even
    > after i log off log on it is not applied, i suppose a server restart is
    > necessary for it to apply even if it is a user policy?
     
    No. Most probably, Loopback replace is enabled on the server.
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    Thursday, October 22, 2015 10:00 AM
  • however on the server, even after i log off log on it is not applied, i suppose a server restart is necessary for it to apply even if it is a user policy?

    Are you unblocked on this?
     
    If not yet, to troubleshoot it, I'd suggest to run "Gpresult /h C:\result.html" on the machine. It will show you details on what Group Policy Objects have been applied and their settings.
     
    (The GPResult output will also show you the winning GPO with loopback enabled)
     

    Regards,

    Ethan Hua


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com

    Friday, October 23, 2015 7:13 AM
    Moderator