Manuals / Microsoft / Computer Equipment / Server

Microsoft Windows NT 4.0 remove the user’s name from the “Shut down the system”, Saved Settings

Models: Windows NT 4.0

1 104

Download 104 pages 4.81 Kb

Page 67

remove the user’s name from the “Shut down the system”

Subcategory:	Restrictions
Selection:	Disable Shut Down command
Description:	Disables the Shut Down option on the Start menu. Note
	that this does not disable the user’s ability to shut down
	the computer using the CTRL-ALT-DEL sequence. If you
	want to remove the user’s ability to use CTRL-ALT-DEL,
	remove the user’s name from the “Shut down the system”
	user right in User Manager.
Key:	HKEY_CURRENT_USER
	\Software
	\Microsoft
	\Windows
	\CurrentVersion
	\Policies
	\Explorer

Registry Value	Registry Data	Description
NoClose	REG_DWORD Off = 0 or value is removed; On = 1

Saved Settings
Category:	Windows NT Shell
Subcategory:	Restrictions
Selection:	Don't save settings at Exit
Description:	Disables or enables the ability to save modifications that
	the user makes during the logon session.
Key:	HKEY_CURRENT_USER
	\Software
	\Microsoft
	\Windows
	\CurrentVersion
	\Policies
	\Explorer

Registry Value	Registry Data	Description
NoSaveSettings	REG_DWORD Off = 0 or value is removed; On = 1

Registry Editing Tools

Category: System

Subcategory: Restrictions

Selection:Disable registry editing tools

Description: Disable user’s ability to run Regedit.exe or Regedt32.exe.

Key:HKEY_CURRENT_USER \Software \Microsoft

Microsoft Windows NT Server White Paper

59

Image 67

Microsoft Windows NT 4.0 remove the user’s name from the “Shut down the system”, Saved Settings, Registry Editing Tools

Contents

White Paper Guide to Microsoft Windows NT 4.0 Profiles and Policies Server Operating SystemMicrosoft Corporation One Microsoft Way Redmond, WA 98052-6399 USA 1997 Microsoft Corporation. All rights reserved0997 Abstract Page Creating and Maintaining User Profiles CONTENTSIntroduction Establishing User Profiles - An OverviewTemplates Registry Keys Modified by the System Policy Editor DefaultSystem Policy - An Introduction The System Policy EditorPrinter Browse Thread Server Scheduler Error Beep Start Menu Shut Down Command Saved Settings Registry Editing ToolsWelcome Tips Default Computer Settings Remote Update Communities Permitted Managers Public Community Traps Run CommandRegistry Entries Not Included in the System Policy Editor Appendix A -FlowchartsFor More Information Appendix C - Usage NotesINTRODUCTION Profiles, Policies, and the Zero Administration KitTCO and the User Before You Begin What are User Profiles and System Policies?2 Microsoft Windows NT Server White Paper Directory Replication systemroot% Technical NotesRoaming User System PolicyESTABLISHING USER PROFILES - AN OVERVIEW Creating and Administering User ProfilesUser Profile Structure The NTuser.dat file contains the following configuration settings Windows NT 4.0 file Windows NT 4.0 and Windows User Profile DifferencesUser Profile Planning and Implementation To change encoded User Profile information There are three methods to correct this Working Around Slow Network Links 3. Delete the network connection and reconnectCreating a New Roaming User Profile for Windows NT CREATING AND MAINTAINING USER PROFILESTo create a new roaming user profile e Continue to Step ∙ To copy a template profile manually to a number of users ∙ To copy an existing user’s profile to another user14 Microsoft Windows NT Server White Paper To create a new mandatory User Profile Creating a New Mandatory User Profile for Windows NT16 Microsoft Windows NT Server White Paper called TemplateUserMaking a Roaming Profile Mandatory in Windows NT pdm, and will check again Creating a New Roaming User Profile for a Windows 95 User Maintaining User Profiles with Control Panel System Properties Creating a New Mandatory User Profile for WindowsTo create a mandatory user profile for a Windows 95 user Deleting Profiles c\\computername See the Windows NT Server Resource Kit for more informationddays Valid profile types are will open to the profile directory used by that account Viewing the Contents of the Profiles Directory on a Local Computer The All Users Shared Profile Log Files Used by Profiles26 Microsoft Windows NT Server White Paper Profile Names and Storage in the Registry Default User Template Profilessystemroot%\Profiles\All Users\Start Menu\Programs Manually Administering a User Profile through the Registry process. For this reason, we recommend that you use the user name \%systemroot%\Profiles\Default User\Desktop30 Microsoft Windows NT Server White Paper Extracting a User Profile for Use on Another Domain or Machine Creating Profiles Without User-Specific Connections Troubleshooting User Profiles with the UserEnv.log File Sample Log System Policy Files SYSTEM POLICY - AN INTRODUCTIONHow Policies Are Applied Policy ReplicationAdditional Implementation Considerations ∙ What type of restrictions do you want to impose on users? Installing the System Policy Editor on a Windows 95 Computer Installing the System Policy Editor on a Windows NT WorkstationTHE SYSTEM POLICY EDITOR To install the System Policy Editor from a Windows NT 4.0 Server Updating the Registry with the System Policy EditorSystem Policy Editor Template .Adm Files Your Own Custom .Adm File,”later in this document Creating a System Policy tem Policy Editor Creating Alternate Folder Paths Deploying Policies for Windows NT 4.0 Machines 3. In the Update mode box, select Manual use specific path Deploying Policies for Windows 95 MachinesModifying Policy Settings on Stand-Alone Workstations Creating a Custom .Adm File To close the category after filling in the options, you would use KEYNAME System\CurrentControlSet\Services\ LanManServer\Parameters3. Choose the CLASS in which you want your custom entries to appear would useChecked REGDWORD with a value of VALUENAME ValueToBeChanged VALUEON “Turned On” VALUEOFF “Turned Off” PART !!MyPolicy NUMERIC DEFAULT VALUENAME ValueToBeChanged END PARTPART !!MyPolicy EDITTEXT EXPANDABLETEXT VALUENAME ValueToBeChanged MAXLEN 4 END PARTBuilding Fault Tolerance for Custom Shared Folders Configuring System Policies Based on Geographic LocationClearing the Documents Available List will refer the client to multiple servers for the same path. For example, on a Dfs server, the administrator has defined that users connecting to the UNC path \\Dfsserver\Dfsshare\Customfolder, will be returned a response with three dif- ferent servers, \\Server1\Customerfolder, \\Server2\Customerfolder, and \\Server3\Customerfolder, all of which contain the same data. The client ma- chine, which can be either a Windows NT-based 4.0 machine or a Wallpaper REGISTRY KEYS MODIFIED BY THE SYSTEM POLICY EDITOR DEFAULT TEMPLATESDefault User Settings Control Panel Display Applicationcan start unauthorized applications. To further restrict the Start Menu Run CommandSettings Folders Color SchemeStart Menu Find Command Settings Taskbar56 Microsoft Windows NT Server White Paper NoDrives My Computer Drive IconsNetwork Neighborhood Icon Network Neighborhood Display58 Microsoft Windows NT Server White Paper Network Neighborhood Workgroup ContentsStart Menu Shut Down Command Desktop Displayremove the user’s name from the “Shut down the system” Saved SettingsRegistry Editing Tools 60 Microsoft Windows NT Server White Paper Windows Applications Restrictionsplaying the folders, files, and shortcuts the user receives Custom Programsuser selects Programs from the Start menu. The user’s Custom Desktop IconsCustom Network Neighborhood Custom Startup Folder62 Microsoft Windows NT Server White Paper Shell Extensions Custom Start MenuStart Menu Common Program Groups Disables the display of common groups when the userExplorer File Menu Removes the File option from Explorer’s toolbar. ThisNetwork Connections Explorer Context MenuRemove the Map Network Drive and Disconnect Net Determines whether the shell waits for the logon script to When enabled, link file tracking uses the configured pathWhen this value is 1, the environment variables declared shown in properties for the shortcut to an application inTask Manager Enables or disables the user’s ability to start Task Manwhen the user logs on for the first and second time. This group are started. If this value is also set in the ComputerRemote Update Default Computer SettingsCommunities Permitted managers CategorySubcategory SelectionWhen enabled, creates administrative shares for physical Run CommandDrive Shares - Workstation Printer Browse Thread ministrators the ability to control this feature. This settingDrive Shares - Server physical drives. These shares were created automaticallyAuthentication Time Limit Error BeepEnables beeping every 10 seconds when a remote job Authentication RetriesRAS Auto-disconnect SelectionWait interval for callbackSelectionAuto disconnect RAS Call-back Interval74 Microsoft Windows NT Server White Paper Shared Programs Folder PathShared Desktop Icons Path Shared Start Menu PathLogon Banner Shared Startup Folder PathBefore the user logs on, displays a custom dialog box Enable shutdown from Authentication dialog boxEnables or disables the Shut Down button on the logon name when the user presses CTRL+ALT+DEL and theCategory Cached Roaming Profiles Read Only Files - Last Access TimeDo not update last access time For files that are only to be read, specifies do not updateDialog Box Timeout SelectionSlow network connection timeoutSelectionTimeout for dialog boxes Slow Network Timeout80 Microsoft Windows NT Server White Paper onds in hexadecimal. Decimal = 0-600 default =Show REGDWORD Off = 0 or value is removed On = time in secAutorun REGISTRY ENTRIES NOT INCLUDED IN THE SYSTEM POLICY EDITORStart Banner Description 0 = enabled 1= disabledRegistry Value Registry DataFOR MORE INFORMATION User Profile Flowcharts APPENDIX A - FLOWCHARTS84 Microsoft Windows NT Server White Paper Begin Profile Process Does the 86 Microsoft Windows NT Server White Paper Flowchart 2. User Logon PartSet USERPROFILE environment variable Check build number for version Continued from Command to Load Profile Load the User ProfileApply System Policy Save settings to Registry Flowchart 3. User Logon Part88 Microsoft Windows NT Server White Paper Flowchart 4. User Logon - Accessing Server-based ProfileSystem Policy Flowchart Existing Windows NT 3.5x Roaming Profile APPENDIX B - IMPLEMENTING USER PROFILESExisting Windows NT 3.5x Roaming Profile ∙ User action To automatically upgrade the profile, log on to theCreating a New Windows NT 4.0 Mandatory Profile Creating a New Windows NT 4.0 Roaming ProfileChanging a Roaming Profile to a Mandatory Profile Updating and Changing a Roaming Profile to a Mandatory Profile92 Microsoft Windows NT Server White Paper Regarding User Logons and User Logoffs Important Information for AdministratorsRecent Updates to Profiles Since Retail Release APPENDIX C - USAGE NOTES94 Microsoft Windows NT Server White Paper Recent Updates to Policies Since Retail ReleaseProfiles APPENDIX D - RELATED KNOWLEDGE BASE ARTICLESPolicies Q155956 Windows NT 4.0 Policy Restriction Error at LogonCannot Restore Default Setting for Shutdown Button Q156432