How do i?

celticfan11 · October 5th, 2007

Stop users from adding desktop icons to the desktop, via GPO in server 2003.

Thanks in advance

drz01 · October 5th, 2007

This site may help?
http://technet2.microsoft.com/Window....mspx?mfr=true

Check out this part of the document.
Appendix B: Non-Administrators Local Group Policy Settings

celticfan11 · October 5th, 2007

Originally Posted by drz01

This site may help?
http://technet2.microsoft.com/Window....mspx?mfr=true

Check out this part of the document.
Appendix B: Non-Administrators Local Group Policy Settings

Im not sure this is what i want. Here is the scenario. GPO is already implimented so i am adding to an exsisting policy. I need to stop users from creating any new desktop icons, via copy and pasting or right clicking and sending to desktop.

celticfan11 · October 6th, 2007

OK i got it to work with the xcacls tool from MS
Basically i run a Cscript and it sets permissions on that users desktop folder to make it read only. NOW the problem is that whenever they run this script i get an error message stating ""you are not using csript for the scripting engine. Screen messages will be supressed." Googled to no avail. The script DOES work, but i get that annoying popup message. This is my script....

c:
net use x: \\storage\script
x:
CScript//H:Cscript
xcacls.vbs "%userprofile%\desktop"\ /g domain\%username%:x r monson\administrator:f /s
c:
net use x: /delete /yes
pause

celticfan11 · October 6th, 2007

Also note that if an admin runs this script i get no error message. So there is something restricting something somewhere? Anyone?

celticfan11 · October 6th, 2007

Outout from the BAT file from a student logging in.

H:\>c:
C:\>net use x: \\storage\script
System error 85 has occurred.
The local device name is already in use.

C:\>x:
X:\>CScript//H:Cscript //S
Microsoft (R) Windows Script Host Version 5.6
Copyright (C) Microsoft Corporation 1996-2001. All rights reserved.
Command line options are saved.
CScript Error: Can't change default script host.

**American Zombie** · October 6th, 2007

Originally Posted by celticfan11

you are not using csript for the scripting engine.

Person who posted here was getting the same error.
At first the solutions are blurred out but if you scroll way down the page you will find the solutions that are not blurred out.

celticfan11 · October 6th, 2007

Their solution was to add "CScript//H:Cscript //S" which windows to run Cscript rather then Wscript. However i still get the error message even after doing exactly as the post says. This was one of that original posts that helped me figure this whole thing out.

celticfan11 · October 6th, 2007

I got it.

If i edited microsoft's cacls.vbs file and took out the following:

If Not IsEngineCScript Then
Wscript.Echo "You are not using CScript for the scripting engine." & vbcrlf & "Screen messages will be surpressed."
End if

Then the error message goes away

So in the end i DID figure out how to stop users from editing their desktops. If anyone else needs to do this and they cant follow my posts, let me know i can summarize how i did it. Thanks for the replys.

**kcnychief** · October 7th, 2007

May have been easier to just make desktops read only ?

celticfan11 · October 7th, 2007

Originally Posted by kcnychief

May have been easier to just make desktops read only ?

That is what i did.

how would you propose doing this for 300 users. Making sure it applies to each user no matter where they login. In a way that would be easier?

**fitz** · October 8th, 2007

? why didn't you just run the script with cscript instead of going through all that?

Code:

cscript <myscriptfile.vbs>

celticfan11 · October 8th, 2007

Originally Posted by fitz

? why didn't you just run the script with cscript instead of going through all that?
Code:
cscript <myscriptfile.vbs>

Going through all of what? The mapping of the drive i assume is what you mean? I am going to not do it that way when i impliment it. I was just doing it that way because i originally started off doing something and it changed to using that cscript. So i kinda just kept it in there.

**fitz** · October 8th, 2007

no, i was referring to having to add a line in to change the default script host to cscript. You don't have to if you just run the vbs script by calling cscript.exe first (cscript <filename>). It won't prompt or cause any of the other problems.

I know it's not really much so maybe the use of the phrase "through all of that" was a little exaggerated.

celticfan11 · October 8th, 2007

Originally Posted by fitz

no, i was referring to having to add a line in to change the default script host to cscript. You don't have to if you just run the vbs script by calling cscript.exe first (cscript <filename>). It won't prompt or cause any of the other problems.

I know it's not really much so maybe the use of the phrase "through all of that" was a little exaggerated.

ahhh ok i get it. I know close to nothing about scripts. So i just did it how i found it on forums. How would i go about doing what you reccommended?
Im assuming i just make a VBS file and have it state "cscript (finename)" plus its parameters?

**fitz** · October 8th, 2007

yes.. if you calling the vbs script from a batch file, in the batch file, just add the line "cscript <filename> <parameters>"

celticfan11 · October 8th, 2007

Originally Posted by fitz

yes.. if you calling the vbs script from a batch file, in the batch file, just add the line "cscript <filename> <parameters>"

awesome, thanks

October 5th, 2007	Top \| #1
celticfan11 OSNN Senior Addict Joined: January 2003 Location: Vernon, CT Posts: 744 Reputation: 340 Power: 121	How do i? Stop users from adding desktop icons to the desktop, via GPO in server 2003. Thanks in advance CPU: Intel 3.2GHz OC'd to 3.4GHz RAM: 1GB PC3200 Harddrive: .710TB combined Local and Network storage Video Card: Geforce 6800 GT 256MB RAM Motherboard: ASU P4P800 Sound: Onboard sound baby Monitor: Faithful 21 inches of PURE CRT Number of Programs Installed: 39 and growing: not counting games, (and yes i use them all)

October 5th, 2007	Top \| #2
drz01 Weekend DJ Joined: March 2004 Location: Toronto Posts: 524 Reputation: 820 Power: 110	Re: How do i? This site may help? http://technet2.microsoft.com/Window....mspx?mfr=true Check out this part of the document. Appendix B: Non-Administrators Local Group Policy Settings

October 5th, 2007	Top \| #3
celticfan11 OSNN Senior Addict Joined: January 2003 Location: Vernon, CT Posts: 744 Reputation: 340 Power: 121	Re: How do i? Originally Posted by drz01 This site may help? http://technet2.microsoft.com/Window....mspx?mfr=true Check out this part of the document. Appendix B: Non-Administrators Local Group Policy Settings Im not sure this is what i want. Here is the scenario. GPO is already implimented so i am adding to an exsisting policy. I need to stop users from creating any new desktop icons, via copy and pasting or right clicking and sending to desktop. CPU: Intel 3.2GHz OC'd to 3.4GHz RAM: 1GB PC3200 Harddrive: .710TB combined Local and Network storage Video Card: Geforce 6800 GT 256MB RAM Motherboard: ASU P4P800 Sound: Onboard sound baby Monitor: Faithful 21 inches of PURE CRT Number of Programs Installed: 39 and growing: not counting games, (and yes i use them all)

October 6th, 2007	Top \| #4
celticfan11 OSNN Senior Addict Joined: January 2003 Location: Vernon, CT Posts: 744 Reputation: 340 Power: 121	Re: How do i? OK i got it to work with the xcacls tool from MS Basically i run a Cscript and it sets permissions on that users desktop folder to make it read only. NOW the problem is that whenever they run this script i get an error message stating ""you are not using csript for the scripting engine. Screen messages will be supressed." Googled to no avail. The script DOES work, but i get that annoying popup message. This is my script.... c: net use x: \\storage\script x: CScript//H:Cscript xcacls.vbs "%userprofile%\desktop"\ /g domain\%username%:x r monson\administrator:f /s c: net use x: /delete /yes pause CPU: Intel 3.2GHz OC'd to 3.4GHz RAM: 1GB PC3200 Harddrive: .710TB combined Local and Network storage Video Card: Geforce 6800 GT 256MB RAM Motherboard: ASU P4P800 Sound: Onboard sound baby Monitor: Faithful 21 inches of PURE CRT Number of Programs Installed: 39 and growing: not counting games, (and yes i use them all)

October 6th, 2007	Top \| #5
celticfan11 OSNN Senior Addict Joined: January 2003 Location: Vernon, CT Posts: 744 Reputation: 340 Power: 121	Re: How do i? Also note that if an admin runs this script i get no error message. So there is something restricting something somewhere? Anyone? CPU: Intel 3.2GHz OC'd to 3.4GHz RAM: 1GB PC3200 Harddrive: .710TB combined Local and Network storage Video Card: Geforce 6800 GT 256MB RAM Motherboard: ASU P4P800 Sound: Onboard sound baby Monitor: Faithful 21 inches of PURE CRT Number of Programs Installed: 39 and growing: not counting games, (and yes i use them all)

Latest News Posts

Latest Forum Posts

Latest Member Blogs

October 6th, 2007	Top \| #6
celticfan11 OSNN Senior Addict Joined: January 2003 Location: Vernon, CT Posts: 744 Reputation: 340 Power: 121	Re: How do i? Outout from the BAT file from a student logging in. H:\>c: C:\>net use x: \\storage\script System error 85 has occurred. The local device name is already in use. C:\>x: X:\>CScript//H:Cscript //S Microsoft (R) Windows Script Host Version 5.6 Copyright (C) Microsoft Corporation 1996-2001. All rights reserved. Command line options are saved. CScript Error: Can't change default script host. CPU: Intel 3.2GHz OC'd to 3.4GHz RAM: 1GB PC3200 Harddrive: .710TB combined Local and Network storage Video Card: Geforce 6800 GT 256MB RAM Motherboard: ASU P4P800 Sound: Onboard sound baby Monitor: Faithful 21 inches of PURE CRT Number of Programs Installed: 39 and growing: not counting games, (and yes i use them all)

October 6th, 2007	Top \| #7
American Zombie OSNN Veteran Addict Joined: June 2004 Location: Seattle Posts: 2,849 Reputation: 2689 Power: 148	Re: How do i? Originally Posted by celticfan11 you are not using csript for the scripting engine. Person who posted here was getting the same error. At first the solutions are blurred out but if you scroll way down the page you will find the solutions that are not blurred out.

October 6th, 2007	Top \| #8
celticfan11 OSNN Senior Addict Joined: January 2003 Location: Vernon, CT Posts: 744 Reputation: 340 Power: 121	Re: How do i? Their solution was to add "CScript//H:Cscript //S" which windows to run Cscript rather then Wscript. However i still get the error message even after doing exactly as the post says. This was one of that original posts that helped me figure this whole thing out. CPU: Intel 3.2GHz OC'd to 3.4GHz RAM: 1GB PC3200 Harddrive: .710TB combined Local and Network storage Video Card: Geforce 6800 GT 256MB RAM Motherboard: ASU P4P800 Sound: Onboard sound baby Monitor: Faithful 21 inches of PURE CRT Number of Programs Installed: 39 and growing: not counting games, (and yes i use them all)

October 6th, 2007	Top \| #9
celticfan11 OSNN Senior Addict Joined: January 2003 Location: Vernon, CT Posts: 744 Reputation: 340 Power: 121	Re: How do i? I got it. If i edited microsoft's cacls.vbs file and took out the following: If Not IsEngineCScript Then Wscript.Echo "You are not using CScript for the scripting engine." & vbcrlf & "Screen messages will be surpressed." End if Then the error message goes away So in the end i DID figure out how to stop users from editing their desktops. If anyone else needs to do this and they cant follow my posts, let me know i can summarize how i did it. Thanks for the replys. CPU: Intel 3.2GHz OC'd to 3.4GHz RAM: 1GB PC3200 Harddrive: .710TB combined Local and Network storage Video Card: Geforce 6800 GT 256MB RAM Motherboard: ASU P4P800 Sound: Onboard sound baby Monitor: Faithful 21 inches of PURE CRT Number of Programs Installed: 39 and growing: not counting games, (and yes i use them all)

October 7th, 2007	Top \| #10
kcnychief █▄█ ▀█▄ █ Joined: April 2005 Location: Massachusetts Posts: 16,949 Reputation: 4941 Power: 302	Re: How do i? May have been easier to just make desktops read only ? XBOX Live Gamertag: kcnychief

October 7th, 2007	Top \| #11
celticfan11 OSNN Senior Addict Joined: January 2003 Location: Vernon, CT Posts: 744 Reputation: 340 Power: 121	Re: How do i? Originally Posted by kcnychief May have been easier to just make desktops read only ? That is what i did. how would you propose doing this for 300 users. Making sure it applies to each user no matter where they login. In a way that would be easier? CPU: Intel 3.2GHz OC'd to 3.4GHz RAM: 1GB PC3200 Harddrive: .710TB combined Local and Network storage Video Card: Geforce 6800 GT 256MB RAM Motherboard: ASU P4P800 Sound: Onboard sound baby Monitor: Faithful 21 inches of PURE CRT Number of Programs Installed: 39 and growing: not counting games, (and yes i use them all)

October 8th, 2007	Top \| #12
fitz *XPista7eopardix Joined: April 2004 Location: Chicagoland Posts: 4,014 Reputation: 2947 Power: 164**	Re: How do i? ? why didn't you just run the script with cscript instead of going through all that? Code: cscript <myscriptfile.vbs> Hee-hee! Evil makes my buttocks tingle.

October 8th, 2007	Top \| #13
celticfan11 OSNN Senior Addict Joined: January 2003 Location: Vernon, CT Posts: 744 Reputation: 340 Power: 121	Re: How do i? Originally Posted by fitz ? why didn't you just run the script with cscript instead of going through all that? Code: cscript <myscriptfile.vbs> Going through all of what? The mapping of the drive i assume is what you mean? I am going to not do it that way when i impliment it. I was just doing it that way because i originally started off doing something and it changed to using that cscript. So i kinda just kept it in there. CPU: Intel 3.2GHz OC'd to 3.4GHz RAM: 1GB PC3200 Harddrive: .710TB combined Local and Network storage Video Card: Geforce 6800 GT 256MB RAM Motherboard: ASU P4P800 Sound: Onboard sound baby Monitor: Faithful 21 inches of PURE CRT Number of Programs Installed: 39 and growing: not counting games, (and yes i use them all)

October 8th, 2007	Top \| #14
fitz *XPista7eopardix Joined: April 2004 Location: Chicagoland Posts: 4,014 Reputation: 2947 Power: 164**	Re: How do i? no, i was referring to having to add a line in to change the default script host to cscript. You don't have to if you just run the vbs script by calling cscript.exe first (cscript <filename>). It won't prompt or cause any of the other problems. I know it's not really much so maybe the use of the phrase "through all of that" was a little exaggerated. Hee-hee! Evil makes my buttocks tingle.

October 8th, 2007	Top \| #15
celticfan11 OSNN Senior Addict Joined: January 2003 Location: Vernon, CT Posts: 744 Reputation: 340 Power: 121	Re: How do i? Originally Posted by fitz no, i was referring to having to add a line in to change the default script host to cscript. You don't have to if you just run the vbs script by calling cscript.exe first (cscript <filename>). It won't prompt or cause any of the other problems. I know it's not really much so maybe the use of the phrase "through all of that" was a little exaggerated. ahhh ok i get it. I know close to nothing about scripts. So i just did it how i found it on forums. How would i go about doing what you reccommended? Im assuming i just make a VBS file and have it state "cscript (finename)" plus its parameters? CPU: Intel 3.2GHz OC'd to 3.4GHz RAM: 1GB PC3200 Harddrive: .710TB combined Local and Network storage Video Card: Geforce 6800 GT 256MB RAM Motherboard: ASU P4P800 Sound: Onboard sound baby Monitor: Faithful 21 inches of PURE CRT Number of Programs Installed: 39 and growing: not counting games, (and yes i use them all)

October 8th, 2007	Top \| #16
fitz *XPista7eopardix Joined: April 2004 Location: Chicagoland Posts: 4,014 Reputation: 2947 Power: 164**	Re: How do i? yes.. if you calling the vbs script from a batch file, in the batch file, just add the line "cscript <filename> <parameters>" Hee-hee! Evil makes my buttocks tingle.

October 8th, 2007	Top \| #17
celticfan11 OSNN Senior Addict Joined: January 2003 Location: Vernon, CT Posts: 744 Reputation: 340 Power: 121	Re: How do i? Originally Posted by fitz yes.. if you calling the vbs script from a batch file, in the batch file, just add the line "cscript <filename> <parameters>" awesome, thanks CPU: Intel 3.2GHz OC'd to 3.4GHz RAM: 1GB PC3200 Harddrive: .710TB combined Local and Network storage Video Card: Geforce 6800 GT 256MB RAM Motherboard: ASU P4P800 Sound: Onboard sound baby Monitor: Faithful 21 inches of PURE CRT Number of Programs Installed: 39 and growing: not counting games, (and yes i use them all)