I'm new to Kix, just started exploring a week ago. How do I hide the application icons in the Start->Program? I am changing the desktop policy to restrict user's access to some aaplication, for example, Notepad.

Thanks and regards,
MT

+ delete the shortcut
+ hide the executable
+ delete/rename the executable
+ create policy list of applications user is allowed to run.

The first two really will not stop a determined user from finding or running the application. The third of course does a good job, but deleting useful utilities may cause problems further down the line.

The last is the most powerful but also may be trickey to implement without solid testing first. You can not create a list under Win9x/NT of files that can not be run, only files that can. This obviously presents some danger - set the wrong exe's and users and administrator could be locked out of the system (for example, no access to regedit, and list is not correct, you might have trouble getting back into the O/S).

You can use kix to perform any of these, but if pursuing the last suggest examining running Windows Policies versus a scripting process.

Lastly, as far as hiding specific icons, suggest examining the Policy template files on the WinNT server (*.adm), and checking into the resource at www.winternals.com. Both will provide wealth of information on keys you can change, and proper settings to implement.

Bill

You could try installing the poledit program that gives you basically a GUI for your registry and provides you with a sorts of customisations for your users. I would recommend setting only a handful of policies.
Once you have this on all your workstations then copy your config.pol file to your netlogon share. As our friend says you can use .adm templates that you can customise. I use a program called SMS from MS to restrict certain .exe and kixtart comes in very handy to customise or to write registry keys to your workstations.. Jacklothian has some very good solutions to this sort of thing and you will get some good pointers from him...

hope this helps.

Steve

code:

---

$path = "C:|Windows\Start Menu\Programs\Accessories\"
$file = "Notepad.lnk"
$aa = GetFileAttr($path+$file)
$rc = SetFileAttr($path+$file,$aa | 2)

---

code:

---

SetFileAttr($path+$file,$aa & &FFFD)

---

I know this is a kixtart bulletinboard, but the best way to hide shortcuts, programs and more is editing the regestry, or useing the poledit.exe program which come with win9x

For further information on poledit see.
www.elkantler.net/security/security.htm

Glenn

Thanks and regards,
MT