I hope someone knows this.....

Anonymous · Post by **Anonymous** » Tue Jun 07, 2005 6:02 am

Ok let me describe a little bit what I am searching for..

1st I currently have a Windows 2003 Server running a domain controller (AD) from which I use to control group policy across specific groups and deploying software and settings to connecting clients on the domain.

Where I have run in to a issue is trying to figure out the best way to remove Internet Explorer icons from the start menu and the quick launch since I chose to deploy Mozilla Firefox as our primary internet browser. (There already is a setting to remove it from the desktop).

I’m sure we can implement a registry change in a login script (Prefer not to use login scripts).

Or possibly implement a login script that removes the IE links from the directory’s (Again prefer not using login scripts).

What I would really like to do is figure out if there is away to control the "Set Program Access and Defaults" through GPO (Group Policy Object)

If so this would be my preferred way of controlling what applications are for what usage.

Goal: Remove all Internet Explorer and Outlook Express Icons visible to users on the domain.

Any help on this would be greatly appreciated.

Thank you

Savis

Archived topic from Iceteks, old topic ID:3380, old post ID:27276

Red Squirrel · Post by **Red Squirrel** » Tue Jun 07, 2005 8:04 am

Wow, and where I work, we have to deploy IE instead of firefox.

I'm working on the upgrade right now actually, need to ensure it works before deploying, but when does IE actually work?

For the desktop, that's in the registry somewhere as it's not a "real" icon. For the quick launch, it's in the application data folder. So easiest would be to push a small application that would set the registry change and delete the icon. A batch file with a .reg file would do the trick.

Archived topic from Iceteks, old topic ID:3380, old post ID:27277

Anonymous · Post by **Anonymous** » Tue Jun 07, 2005 3:35 pm

Basicley the way I didnt want to do this hehehe (Login Script .bat .vbs .reg)

The desktop icon is also handeld with the Group Policy Object (Atleast that is how I did it)

So there is no way to control "Set Program Access and Default" through Group Policy Object?

Archived topic from Iceteks, old topic ID:3380, old post ID:27283

Red Squirrel · Post by **Red Squirrel** » Tue Jun 07, 2005 3:45 pm

Though instead of a login script you can push it directly on. I don't know of any programs that can do this to many machines at once but I'm sure there's some. Basically it would drop the required files on c$ and add a silent setup script in a special registry key to make it run. I think this is how programs like mcafee EPO work push the AV to all the machines.

Archived topic from Iceteks, old topic ID:3380, old post ID:27284

Cold Drink · Post by **Cold Drink** » Tue Jun 07, 2005 5:24 pm

Seems all you can do with it is hide/disable it:
http://support.microsoft.com/?id=328326#6

Like Red says, sorry to say but I think your best bet is to push applications/scripts on and perform the changes that way or use RemoteRegistry. You don't need to do it with login scripts though. This seems pretty handy:
http://www.sysinternals.com/Utilities/PsExec.html

Archived topic from Iceteks, old topic ID:3380, old post ID:27286

Anonymous · Post by **Anonymous** » Tue Jun 07, 2005 5:35 pm

that is all i wish to do is disable / hide the icons but i want to be able to do this through changeing access default settings in GPO hehe i dont know if there is an option to control the options in that through gpo

Archived topic from Iceteks, old topic ID:3380, old post ID:27287

Anonymous · Post by **Anonymous** » Tue Jun 07, 2005 5:48 pm

BOOMB BABY!!!!

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerCLSID{871C5380-42A0-1069-A2EA-08002B30309D}ShellFolder]
"Attributes"=dword:00100000
[HKEY_LOCAL_MACHINESOFTWAREClientsIMWindows MessengerInstallInfo]
"IconsVisible"=dword:00000000
[HKEY_LOCAL_MACHINESOFTWAREClientsMail]
@=""
[HKEY_LOCAL_MACHINESOFTWAREClientsMailOutlook ExpressInstallInfo]
"IconsVisible"=dword:00000000
[HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternet]
@=""
[HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetIEXPLORE.EXEInstallInfo]
"IconsVisible"=dword:00000000
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components>{26923b43-4d38-484f-9b9e-de460746276c}]
"IsInstalled"=dword:00000000
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
"IsInstalled"=dword:00000000
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerExtensions{FB5F1910-F110-11d2-BB9E-00C04F795683}]
"CLSID"="!{1FBA04EE-3024-11D2-8F1F-0000F87ABD16}"
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSetupOc ManagerSubcomponents]
"ieaccess"=dword:00000000
"oeaccess"=dword:00000000
"wmaccess"=dword:00000000

now im just gona create a VBS file to set all that on login wich is fine since im applying the login script to the group...

Archived topic from Iceteks, old topic ID:3380, old post ID:27288