Deploying Office 2013 with Group Policy

I would like to deploy Office 2013 using group policy. I am new to group policy so am looking for some advice and guidance on the best way to deploy. I would like to deploy with no interaction with the user but yet display a message so that they
know not to open Office. I would also like to create a custom registry setting so that if I need to re-install, all I have to do is delete the registry setting. I have tried a group policy for installing with OCT settings (Basic, Suppress
Model checked, No Cancel checked, Completion Notice checked) and modifying the Config.xml (<Display Level="Basic" CompletionNotice="yes" SuppressModal="yes" AcceptEula="yes" />) but I can not get it to display
the installer screen so that users know it is installing. It does display the screen when running the setup.exe manually. I have a setting in the OCT that creates the registry setting and that is working correctly. My group policy is set to run the
below bat file at startup in the Computer Configuration.
setlocal
REM *********************************************************************
REM Environment customization begins here. Modify variables below.
REM *********************************************************************
REM Get ProductName from the Office product's core Setup.xml file, and then add "office15." as a prefix.
set ProductName=Office15.Standard
REM Set DeployServer to a network-accessible location containing the Office source files.
set DeployServer="\\xxxxxx\setup.exe"
REM Set LogLocation to a central directory to collect log files.
set LogLocation=\\xxxxx\Logfiles
REM *********************************************************************
REM Deployment code begins here. Do not modify anything below this line.
REM *********************************************************************
IF NOT "%ProgramFiles(x86)%"=="" (goto ARP64) else (goto ARP86)
REM Operating system is X64. Check for 32 bit Office in emulated Wow6432 uninstall key
:ARP64
reg query HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\Microsoft\Windows\CurrentVersion\Uninstall\%ProductName%
if NOT %errorlevel%==1 (goto End)
REM Check for 32 and 64 bit versions of Office 2013 in regular uninstall key.(Office 64bit would also appear here on a 64bit OS)
:ARP86
reg query HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\%ProductName%
if %errorlevel%==1 (goto Office) else (goto End)
REM If 1 returned, the product was not found. Run setup here.
:Office
%DeployServer%
echo %date% %time% Setup ended with error code %errorlevel%. >> %LogLocation%\%computername%.txt
REM If 0 or other was returned, the product was found or another error occurred. Do nothing.
:End
Endlocal
Any advice or guidance would be greatly appreciate on how to get a pop up message while software is installing or if there is a better way to deploy.

> but I can not get it to display the installer screen so that users know
> it is installing. It does display the screen when running the setup.exe
> manually. I have a setting in the OCT that creates the registry setting
> and that is working correctly. My group policy is set to run the
> below bat file at startup in the Computer Configuration.
Check http://gpsearch.azurewebsites.net/#2308 - if this is enabled, you
will not be able to show "anything" in startup scripts...
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Similar Messages

Deploy Office 2013 using Group Policy

Below are a list of questions I have regarding setting up Office 2013 deployment automation. We are looking to deploy Office 2013 Business Click-to-Run using a group policy. We have already setup the deployment using the Office Deployment Tool and have
the configuration file all setup. The more automation we can provide the better to give the end users to best/fastest experience with this upgrade.
How do we automate the deployment process using a group policy?
Is there a way to have the Office 2013 deployment auto activate using the users credentials? We will be using the same password for all the user accounts for the deployment then having them change it later once everything is up and running. Would like to
avoid having to go around and help each user activate the software as well.
We would like to uninstall all previous versions of Office from the workstations that we're deploying Office 2013 to?
Thank you!

Below are a list of questions I have regarding setting up Office 2013 deployment automation. We are looking to deploy Office 2013 Business Click-to-Run using a group policy. We have already setup the deployment using the Office Deployment Tool and
have the configuration file all setup. The more automation we can provide the better to give the end users to best/fastest experience with this upgrade.
How do we automate the deployment process using a group policy?
Is there a way to have the Office 2013 deployment auto activate using the users credentials? We will be using the same password for all the user accounts for the deployment then having them change it later once everything is up and running. Would like to
avoid having to go around and help each user activate the software as well.
We would like to uninstall all previous versions of Office from the workstations that we're deploying Office 2013 to?
1. Because Office (in all forms) requires setup.exe to orchestrate the installations, classic Group Policy Software Installation (which requires an MSI file) is not suitable. This has been the case since Office2007. If you are constrained to use GP, you
will need to use GP Startup Scripts. There is guidance for this, in the Office resource kit library on TechNet.
http://technet.microsoft.com/en-us/library/ff602181(v=office.15).aspx
2. Retail editions of Office, typically require you to login to the Microsoft Account where the license is associated, to validate the Office license. If you are using a product key method instead, you can use the PIDKEY element in your configuration.xml
http://technet.microsoft.com/en-US/library/jj219426(v=office.15).aspx
3. You'll need to tackle this yourself (there is no way to do this via C2R configuration). You could include the relevant uninstall-previous-version logic within your GP Startup Script (as a step prior to installing Office C2R). You'll need to cater for
whatever previous-versions might exist in your environment, and whatever the relevant uninstallation methods are for each previous-version.
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Deploy Office 2013 with language pack

Hi,
We want to deploy Office 2013, for this I followed the tutorial:
http://gallery.technet.microsoft.com/office/How-to-Deploying-Office-0f954e7f
In the first step I need to make an MSP file, but this file doesn't get used in the deployment? I think this is a fault in the tutorial.
Also the uninstall string is setuP.exe /uninstall. Is this correct?
Second we want to deploy the dutch language pack with SCCM 2012, but I can't find out how. The package need to be installed but Office 2013 still need to be default language English.
Can someone help me out with this?
Thanks in advance.

Some troubleshooting tips:
Run the installation command locally using SYSTEM account (Get psexec.exe, open cmd, run "psexec.exe -s cmd", this will open a new command line window with SYSTEM privilege, try running your installation command there)
Check the Office 2013 installation logfiles to see if your configurations are correct, more info on that here:
http://blogs.technet.com/b/odsupport/archive/2010/12/30/troubleshooting-office-installation-failures.aspx
After those two steps are ready and you're sure your installation command works, you try it with ConfigMgr
With ConfigMgr, check %windir%\ccm\logs\ -folder for AppEval.log, AppEnforce.log and AppDiscovery.log, more info on these logfiles you can find here:
http://blogs.technet.com/b/configmgrdogs/archive/2012/05/26/new-logs-in-configmgr-2012-client-logs.aspx

Deploying Java Certificates with Group Policy

Migrating workstations from MSJVM to Sun Java JRE 1.4.2_08. In the past with MSJVM enabled Certificate acceptatance could be achieved trhough Group Policy. Now with JRE enabled certificates for Secure site and signed applet have to manually be accepted. How can I centrally manage these certificates for all of our workstations. Preferablly using Group Polcy.
-Thanks

> but I can not get it to display the installer screen so that users know
> it is installing. It does display the screen when running the setup.exe
> manually. I have a setting in the OCT that creates the registry setting
> and that is working correctly. My group policy is set to run the
> below bat file at startup in the Computer Configuration.
Check http://gpsearch.azurewebsites.net/#2308 - if this is enabled, you
will not be able to show "anything" in startup scripts...
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Deploying office 2013 Professional plus with SCCM

Hello,
I want to deploy office 2013 with SCCM 2012. I want to make an package but how can i
download the office 2013 complete version ?<o:p></o:p>

Hi,
As far as I know, Microsoft now only provide MSI-based Office installer for Volume licensing Office. If you are a Volume Licensing customer, you can download the media via the Volume Licensing Service Center:
http://www.microsoft.com/licensing/about-licensing/office.aspx
More reference about how to deploy Microsoft Office 2013 using SCCM 2012:
http://gallery.technet.microsoft.com/office/How-to-Deploying-Office-0f954e7f
Thanks,
Ethan Hua CHN
TechNet Community Support

Deploying MS Office 2013 with GPO

OK i would like to deploy office 2013 via GPO, i finally have been able to get the script to work however there is one more detail i need to get figured out.... How can i incorporate into the script so that it will only run once... my script is below
and does the following, it uninstalls office 2010 whether it be 32bit or 64bit then silently installs office 2013 as a startup GPO... how would the script look if i'd like to add so that it looks for a specific txt file that if its there it does nothing and
if it's not it runs install script and perhaps at end of install script maybe it creates that txt file... I need help on the best way to just "RUNONCE"
here is my script:
"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\setup.exe" /uninstall ProPlus /config "\\****\Office13\Uni_Office_10\SilentUninstall.xml"
"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\setup.exe" /uninstall ProPlus /config "\\****\Office13\Uni_Office_10\SilentUninstall.xml"
setlocal
REM ********************************************************************
REM Environment customization begins here. Modify variables below.
REM ********************************************************************
REM Get ProductName from the Office product's core Setup.xml file, and then add "office15." as a prefix.
set ProductName=Office15.PROPLUS
REM Set DeployServer to a network-accessible location containing the Office source files.
set DeployServer=\\****\Office13
REM Set ConfigFile to the configuration file to be used for deployment (required)
set ConfigFile=\\****\Office13\ProPlus.WW\config.xml
REM Set LogLocation to a central directory to collect log files.
set LogLocation=\\****\Office13\LogFiles
REM ********************************************************************
REM Deployment code begins here. Do not modify anything below this line.
REM ********************************************************************
IF NOT "%ProgramFiles(x86)%"=="" (goto ARP64) else (goto ARP86)
REM Operating system is X64. Check for 32 bit Office in emulated Wow6432 uninstall key
:ARP64
reg query HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\Microsoft\Windows\CurrentVersion\Uninstall%ProductName%
if NOT %errorlevel%==1 (goto End)
REM Check for 32 and 64 bit versions of Office 2010 in regular uninstall key.(Office 64bit would also appear here on a 64bit OS)
:ARP86
reg query HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall%ProductName%
if %errorlevel%==1 (goto DeployOffice) else (goto End)
REM If 1 returned, the product was not found. Run setup here.
:DeployOffice
echo %date% %time% %ComputerName% "Has Run the install Process" >> %LogLocation%\HasRunInstall.txt
start /wait %DeployServer%\setup.exe /config %ConfigFile%
echo %date% %time% %computername% Setup ended with error code %errorlevel%. >> %LogLocation%\FinishedInstall.txt
REM If 0 or other was returned, the product was found or another error occurred. Do nothing.
:End
Endlocal

The problem with Office 2010 and later is that it is not designed to be installed remotely or by a script. You need to create an install spec and set up some prerequisites fist. If you ten follow the instructions for using a GPO to deploy Office
you will not need to use a "RunOnce" key or anything else.
Note that eh RunOnce key take a command or batch and command and is deleted as soon as it is executed. The problem you have to solve is how to set the RunOnce key to begin with.
You really must use the information in the links posted for Office deployment. You cannot do an end run around this with any success. If you search for forum posts on this you will see that many have been exactly where you are. Don't wast
your time. Follow the instructions as posted in the Office forum and on the TechNet link. YOu will find it is actually quite easy and very flexible once you understand the steps.
\_(ツ)_/

How to edit Printer Connections in GPO created through Print Management's "Deploy with Group Policy"

Hi there,
I have used the right-click "Deploy with Group Policy" in Print Management on Windows Server 2012 to deploy a printer connection to a GPO.
When you look at the GPO Settings, the Printer Connection is visible under User Configuration -> Policies -> Windows Settings -> Printer Connections -> Path: \ \ printserver\PrinterName.
However, I cannot edit or delete that Printer Connection Path, which would be necessary if I had to rename or delete the printer referenced. If you Edit the GPO, "Printer Connections" is not available under Windows
Settings, only Scripts, Security Settings, Folder Redirection, and Policy-based QoS.
Is there a way to edit the GPO's Printer Connections that are created with "Deploy with Group Policy"?
Thanks for your help.

Hi,
How do you want to edit the printer connection? Do you want to edit the path of printer connection?
Based on my test, we can’t edit the printer connection directly in GPO. We can edit the path of printer connection in printer management.
For detail steps, we can refer to the method Miles Zhang provided in the following link:
Where is "Printer Connections set"?
https://social.technet.microsoft.com/Forums/windowsserver/en-US/77e2b4be-7372-4cb2-9d21-bca83f472fc3/where-is-printer-connections-set?forum=winserverGP
Best Regards,
Erin

Deploying Files with Group Policy - Help Needed

Hi,
I am trying to use group policy to deploy files and folders to our server estate. The policy I have created first creates a folder on each server's C drive and then coppies a set of files to this folder from a network share. The folder creation works fine
but the files copy fails. In the Application logs on the servers it displays the following error:
The computer 'ILMT' preference item in the 'GPO - Servers_Production_ALL {CC026B58-FA3B-4399-AA00-AE8E844B2B47}' Group Policy object did not apply because it failed with error code '0x80070005 Access is denied.' This error was suppressed.
Can anyone advise what exactly does not have access here? I don't know what I need to enable to get this to work.
Can anyone help?
Many thanks
James

The copy is on a file server share. presumably if I just give everybody read access to the share that would suffice?
No it won't.
"Sharing" requires several actions:
a) create the folder
b) share the folder
c) grant NTFS permissions on the folder
I think you've neglected action (c).
For your scenario, you need to grant the "server computers" read permissions to the folder.
You can add individual computer accounts, or a group, or "domain computers".
(In a similar way, you could grant access to a user, a group, or "domain users")
[if you need everybody (users) *AND* everything (computers), you could grant permissions to "authenticated users" since that principal includes *BOTH* users and also computers]
Note that "domain computers" and "authenticated users" include all types of domain member computers, i.e. servers, workstations, etc.
Also, note that granting a "computer account" access to a folder or share, does *NOT* mean that a user account on that computer can access the remote share, i.e. permission is granted to the computer account, and a logged-in user account on
that computer does not inherit any kind of access to the remote share by virtue of being logged in.
This means that the computer can access the share but the user cannot access the share. Because the computer account is an identity/principal of it's own accord.
[None of which really has anything to do with Group Policy at all - it's how Windows does file sharing and ACLs... ;)
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Deploy reader 10.1.3 with group policy

I would like to install 10.1.3 with group policy. I can download the .exe file but extracting it to be an .msi is a struggle. These are Enterprise Windows 7 machines that already have adobe reader 10.1.1 on them. Please help. Thanks.

Moving this discussion to the Adobe Reader forum.

Cannot Save Word files as a PDF in Office 2013 with Office customization tool

Hello
I'm deploying office 2013 as a part of a post clone task. Using the customization tool I created an msp with the full installation (without outlook,Link, or skydrive) I noticed that I cannot save or export files as PDF files. If I do a manual
install (without MSP) I can save files as pdf. I can't find anywhere in the customization tool that allows me to choose different "save as" file types. In office 2010 I used to be able to save word files as PDF files. Any ideas would
be greatly appreciated.
Charles

Hi,
In regarding the issue, could you give me more information? Did you test to install the Office 2013 by using MSP and manual installation in the same computer? Did the other Office suits can not save files as pdf?
Let's do some test to narrow down the issue:
If you use the only one computer to test, please export a new MSP file include all the suits and use the all the default setting. Then we follow the
link to deploy again.
If the issue still exists, please try to change a computer, and update Adobe programs to install the new MSP file to test.
If you get some error message when you save as pdf through Word, please upload, I'll do more deeply research.
Regards,
George Zhao
TechNet Community Support

Deploy Office 2013 - Uninstall Office 2010

Hello,
I am planing to deploy Office 2013 and created a MSP File (Setup /admin) for the silent Installation - everything works fine - except the uninstallation of Office 2010. In the OCT I´ve selected the Option to remove previous Versions of Office. I can
remeber that this works perfect in Office 2010 to remove Office 2007 too.
But in Office 2013 this doesn´t work anymore, the installed applications wizard (appwiz.cpl) Shows both Version of Office are installed. What is the best way to remove the old Version silently and install Office 2013? I would like to have all in one
"Application" deployed via SCCM 2012 SP1.

Have you looked at this document, or it's online equivalents:
http://blogs.msdn.com/b/mssmallbiz/archive/2012/10/22/free-microsoft-ebook-deployment-guide-for-microsoft-office-2013.aspx
In the section "Setup command-line options for Office 2013", they say:
/uninstall [ProductID]
Runs Setup to remove the specified product from the user’s
computer. Look up the value of [ProductID] in the Setup.xml
file for the product that you want to modify.
Example
\\server\share\Office15\setup.exe /uninstall ProPlus
where:
Office15 is the root of the network installation point.
ProPlus is the
[ProductID] ([ProductID]
is equal to the ID attribute of the
Setup element listed in
\\server\share\Office15\ProPlus.WW\setup.xml), where
ProPlus.WW is the location of the Office Professional Plus 2013 installation files.
You can customize the
/uninstall option by using it with
/config and a modified Config.xml file. This is necessary if you want to run a
“silent”
uninstall. In enterprise deployments, we recommend that you run a silent uninstall to prevent prompting users to enter information, and to prevent the installation from waiting for user interactions, even when files are being used.
To run a silent uninstall
Using a text editor, edit the following element attributes in the
\\server\share\Office15\ProPlus.WW\SilentUninstallConfig.xml file:
<Configuration Product="ProPlus">
<Display Level="none"
CompletionNotice="no" SuppressModal="yes"
AcceptEula="yes" /> </Configuration>
At the command line, use the following syntax:
\\server\share\Office15\setup.exe /uninstall ProPlus /config \\server\share\Office15\ProPlus.WW\SilentUninstallConfig.xml
Note:
In Office 2013, just as in Office 2010 and Office 2007, you cannot use the Setup.exe command line to set Windows Installer properties, such as
PIDKEY or DISPLAY. Setup does not pass these properties to Windows Installer. Instead, you make these customizations by using the Office Customization Tool or Config.xml. For a complete list of Setup properties, including blocked
and unsupported properties, see Setup properties in Office 2010.
The information also applies to Office 2013.
Office Customization Tool (OCT) in Office 2013
Config.xml file in Office 2013

Deployment of software through Group policy does not work

Hi all,
I am trying to deploy a program through Group policy, specifically winrar, any client computer is able to install the program. Please find below the events from the workstation:
Log Name: Application
Source: Microsoft-Windows-WMI
Date: 4/27/2014 10:06:01 PM
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: IRCLIENT0001.corp.healthcareinnovation.com
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because
of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Log Name: System
Source: Microsoft-Windows-GroupPolicy
Date: 4/27/2014 10:04:49 PM
Event ID: 1085
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: IRCLIENT0001.corp.healthcareinnovation.com
Description:
Windows failed to apply the Software Installation settings. Software Installation settings might have its own log file. Please click on the "More information" link.
Log Name: System
Source: Application Management Group Policy
Date: 4/27/2014 10:04:49 PM
Event ID: 108
Task Category: None
Level: Error
Keywords: Classic
User: SYSTEM
Computer: IRCLIENT0001.corp.healthcareinnovation.com
Description:
Failed to apply changes to software installation settings. Software changes could not be applied. A previous log entry with details should exist. The error was : %%1612
Log Name: System
Source: Application Management Group Policy
Date: 4/27/2014 10:04:48 PM
Event ID: 102
Task Category: None
Level: Error
Keywords: Classic
User: SYSTEM
Computer: IRCLIENT0001.corp.healthcareinnovation.com
Description:
The install of application WinRAR from policy Basic Computers GPO failed. The error was : %%1612
I am using windows server 2008 R2 and all my clients are running Windows 7 Enterprise and they are working over a domain, note that I am using VMware.
Below there are a list of the troubleshooting steps that have been already applied:
*Disable the the firewall both in the server and in the clients
*Grant read access to the folder where the the program is shared for installation, it was added the authenticated users and domain computers.
*Group policy modifications:
-> User Account Control
Policy Setting Winning GPO
- User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode Elevate without prompting Basic Computers GPO
- User Account Control: Detect application installations and prompt for elevation Disabled Basic Computers GPO
- User Account Control: Only elevate UIAccess applications that are installed in secure locations Disabled Basic Computers GPO
- User Account Control: Run all administrators in Admin Approval Mode Disabled Basic Computers GPO
--> System/Group Policy
Policy Setting Winning GPO
- Startup policy processing wait time Enabled Basic Computers GPO
Amount of time to wait (in seconds): 120
--> System/Logon
Policy Setting Winning GPO
- Always wait for the network at computer startup and logon Enabled Basic Computers GPO
Thank you very much for your time.

Hi Marco,
Based on your description, we can enable diagnostic logging of Group Policy Software Installation processing to troubleshoot the issue.
Regarding this point, the following article can be referred to for more information.
How to troubleshoot software installations by using Windows application management debug logging
http://support.microsoft.com/kb/249621
Once you get the log, you may upload it to OneDrive and provide us the download link.
In addition, the following article provides a step-to-step guidance for deploying software via group policy and can be referred to for double check.
How to use Group Policy to remotely install software in Windows Server 2008 and in Windows Server 2003
http://support.microsoft.com/kb/816102
Best regards,
Frank Shen

How to Install Visual Studio 2010 on a PC with Microsoft Office 2013 with 64 bits

I am with problems to have acess to the link: http://www.microsoft.com/en-us/download/details.aspx?id=12187
Why?
I want do install Visual Studio 2010 on a PC with Microsoft Office 2013 with 64 bits. How can I do it?
Thanks.

Hello Carla Sofia,
Visual Studio installation do not depends on Microsoft Office 2013. They do not have relationship here. I think your problem is that you cannot find the link to install Visual Studio 2010.
In order to know why, please see here:
https://support.microsoft.com/en-us/lifecycle/search/default.aspx?sort=PN&alpha=Visual%20Studio%202010&Filter=FilterNO
The mainstream support for Visual Studio 2010 is already expired and that is why you cannot open any link about Visual Studio 2010 Setup.(I cannot verify whether that link is about VS2010 Setup.)
I think you need to think about the following:
1. If you need Visual Studio 2010, you may have to consider some other channels. For example, official site you can try use MSDN Subscription. For non-official site. Sorry I cannot provide any place for you
2. You can use other latest version of Visual Studio, for example, we have Visual Studio 2012, 2013, 2015 for you to use. You can also use Visual Studio Express 2010 version. It is still available for download.
Best regards,
Barry
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Excel 2003 problem with group policy

When I manually install EMET Excel 2003 works. When Emet is installed via Group Policy Excel 2003 fails to open. Excel 2010 works whether EMET is installed locally or with Group Policy. Any ideas?

I would try exporting the policy on both installs using emet_conf --export and comparing the 2 policies
GBS Premier Field Engineer Cybersecurity Check out my blog http://blogs.technet.com/kfalde or better yet check out http://technet.com/wiki and start contributing :)

Remove the "Safety" tab from IE 11 tools with group policy

Is there any way to remove the "Safety" tab or it's contents from the
tools button in the upper right hand corner of IE 11 with Group Policy 2008 r2. I am using a GPMC on a windows 8.1 computer running IE 11. All of the computers we manage are Windows 7 pro running IE 10 or IE 11. The computers I am trying to remove the "Safety"
from are used as library catalog computers. We have them pretty well locked down with group policy and a squid server. I just need to remove the "Safety" or the contents in it. I would love to remove the "Tools" all together but haven't
found a way.
I thought maybe I could use the "Force Full Screen" but need a back, forward
and home button.

Hi,
There is no method to remove this button.
If no, like that thread, firewall and proxy could meet your requirement.
Creating Rules that Block Unwanted Outbound Network Traffic
http://technet.microsoft.com/en-us/library/cc732306(v=ws.10).aspx
For Proxy, you could use this group policy to disable user to change connection setting. Navigate to
Computer Configuration\Administrative Templates\Windows Components\Internet Explorer
Find the following entry and enable it.
disable changing connection settings
Then don't grant admin permission to other user so that they cannot do any changing on computer.
Karen Hu
TechNet Community Support

Deploying Office 2013 with Group Policy

Similar Messages

Maybe you are looking for