I am setting up a policy for a guest user. Problems i am having is how to do block someone from seeing lock from the start button. All I want them to do is be able to log off.
Also how do you stop people from browsing the network. I just want them to have access to local resources (CD, jump drive).
I have pretty much locked everything down but those. I still need to be able to print and run local apps like office, which I have going but the two above stump me.
Yes I have done that already. But it still has switch user and lock. I have even set it to be log off by default but for whatever reason it works on Windows 7 but not vista. Thank you for the post though.
I also think I have found the solution to the second part of my problem as well. I created GPO settings that modify registry values to remove items from the navigation pane in explorer view.
1. For Favorites, the key is: [HKEY_CLASSES_ROOT\CLSID\{323CA680-C24D-4099-B94D-446DD2D7249E}\ShellFolder]
"Attributes"=dword:a0900100 Changing a0900100 to a9400100 will hide Favorites from Navigation Pane.
2. For Libraries, the key is: [HKEY_CLASSES_ROOT\CLSID\{031E4825-7B94-4dc3-B131-E946B44C8DD5}\ShellFolder]
"Attributes"=dword:b080010d Changing b080010d to b090010d will hide Libraries from Navigation Pane.
3. For Home Group the key is: HKEY_CLASSES_ROOT\CLSID\{B4FB3F98-C1EA-428d-A78A-D1F5659CBA93}\ShellFolder
"Attributes"=dword:b084010c Changing b084010c to b094010c will hide Home Group From Navigation Pane.
4. For Network the key is: HKEY_CLASSES_ROOT\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\ShellFolder
"Attributes"=dword:b0040064 Changing b0040064 to b0940064 will hide Network From Navigation Pane.
5. For Computer the key is: HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder
Create a dword called Attributes and give it the value b094010c
I hope that can help other people out if they ever want to do this.
But I know there is a problem with fast user switching and I think that is why you can't remove lock and switch user from the power button in the start menu.
Ok did a little more testing. The hiding works great in Vista (actually remotes the items from the pane). In Windows 7 it just collapses them. So I am still looking for that answer.