Disabling Windows Explorer For Non Admins and Leaving it Enabled For Admins.

Good evening,
I am running a Citrix XenApp environment and I need to disable explorer.exe from running for non admin users. My team and I have discovered that exporer.exe can be accessed by any app that is being used by the end user and therefore can grant that user access
to the XenApp server interface--this is a BIG NO NO!
The users do not have admin rights when in explorer.exe but they can shutdown the server. I can disable a few areas such as the taskmgr, regedit, cmd, windows+x, and I can prevent the user from shutting down the system by only allowing them to log off,
and prevent them from making changes to desktop icons, but it would be much preferred to stick it to the users and not allow them to access the XenApp server interface at all,
I have tested changing the shell for explorer.exe from explorer.exe to iexplorer.exe and this worked fine (it only displayed the desktop wallpaper for the logged on user), but the change was not reversible. Luckily, I took a snapshot of my virtual test system
before hand. 
Is there a way to prevent Windows Explorer from running for all non admins and also so that the local administrator account is not affected by the change as well? I have also tried preventing explorer.exe from running via GPO but that didn't work.
Thanks in advance,

Hi,
A more robust and managable way of securing your systems by controlling which applications that can be launched is Software Restriction Policies.
Check this article for an introduction to Software Restriction Policies:
http://technet.microsoft.com/en-us/magazine/2008.06.srp.aspx
Regards.
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Similar Messages

  • Windows explorer does not start and could not open control panel.

    HP Touchsmart 610-1280
    When trying to open window explorer, it says window explorer is stopped working and trying to restart. But it does not open. Cannot go to control panel.

    Hello GLPP:
              Can you srst up the computer in safe mode. Turn off computer and turn it back on press F-8 and hold as the computer starts up. Ounce in safe mode open up recovery manger select microsoft recovery and do a back restore recovery choose a date as close as you can before this problem occurred and do the recovery. This will fix your issue.

  • How do I view an FTP site in Windows Explorer for drag and drop file upload in Firefox?

    In Internet Explorer you have the drop-down menu option called '''"Page"''' (located below the address bar, on the right-hand side). In the options listed you can''''' "Open FTP side in Windows Explorer"'''''.
    I cannot seem to locate a similar option within Firefox 4.0.
    Guidance and suggestions welcome. Thanks.

    You can look at:
    * FireFTP: https://addons.mozilla.org/firefox/addon/684
    * FileZilla: http://filezilla.sourceforge.net/

  • Windows Explorer View, Server 2012 and WebDAV

    I am using SharePoint Server 2013 on Windows Server 2012. I cannot get Windows Explorer View working from client machines on this server. These machines are Windows 8, running IE 10 (I am also having problems on my Windows 7 / IE 9 machine).
    I have done everything on the client that I have read about (Trusted Site, the WebClient services, the patch mentioned in a Kb article), but to no avail.
    The client machines CAN open Windows Explorer View on a SharePoint Foundation site that I have hosted on the internet, although in this instance they access the internet directly, rather than through the company network.
    Therefore, I take it that my problem lies either on our SharePoint server, or somewhere in the network. The Proxy does not seem to be a problem as this is bypassed for local sites.
    Somedody said for an earlier version of SharePoint that the WebDAV server role should be
    disabled (which seems counter-intuitive).  Does this make sense, or what else should I be looking at on either my server or in the network environment?

    Thanks for the reply.
    I get the standard message ("We're having a problem opening this location in File Explorer. Add this web site to your Trusted Sites list and try again"). I am not using HTTPS.
    I do not think that the WebDAV is irrelevant on the server, as there are two separate things there:
    Desktop Experience Feature, which installs the WebClient service to allow the server to use WebDAV, and
    WebDAV Publiching Role under Common HTTP functions
    Curiously, after removign the WebDAV Publishign Role, my Win7/IE9 pc (which is not logged on to my client's domain (although I access their network and use SharePoint in my browser) DOES allow Windows Explorer View.
    The domain PCs do not allow it, still.  They get challnged for a user name and password three times before they get the standard message.  But, I did test a machine of their connecting to an internet-hosted website, and it could use Explorer View.

  • How to disable Windows Sharing -- for real

    To move files between my Mac and PC I used Windows Sharing on my MacBook Pro. It works like a charm.
    To enable I go to System Preferences >> Sharing, check the "Windows Sharing" box, press the "Start" button, and enable Windows Sharing for my OS X user account.
    I can then just type my Mac's IP into Windows Explorer on my XP box and voila, full access to my Mac home directory (after typing in my username and password, of course).
    When I'm done I disable WS by performing the activation steps in reverse, and OS X happily says "Windows Sharing Off." However, I find that even though it's off I can still access my Mac from XP. In fact, I'm not even prompted for my password again.
    How do I really turn off Windows Sharing in 10.4.8? Neither my XP box nor my Mac get restarted often, so if my XP box (the weaker link) was compromised, I don't like knowing that my Mac could be reached so easily with full control.
    Any help appreciated. Thanks.

    Strange, but I'd start of by verifying Permissions with Disk Utility, and if that didn't work I'd try Trashing...
    /Library/Preferences/com.apple.sharing.firewall.plist
    /Users/nnnnLibrary/Preferences/com.apple.internetconnect.plist
    /Library/Preferences/SystemConfiguration/preferences.plist
    Reboot and set everything up again.
    And/Or, get Applejack...
    http://www.versiontracker.com/dyn/moreinfo/macosx/19596
    After installing, boot holding down CMD+s, then when the prompt shows, type in...
    applejack AUTO
    Then let it do all 5 of it's things.

  • Enable windows explorer for LLB files broke

    was running LV6, 6.1, now 7.0 on win98 machine.
    recently ran microsoft regclean and now I have no more support for viewing inside .LLB files through windows explorer. Attempting to re-enable this through LabVIEW/tools/options does not help.
    hints?

    Hi Paul,
    I would not reccommend that you manually edit the registry keys associated with LabVIEW (or any other program for that matter) unless you are intimately familiar with it. We do not publish the registry keys used by LabVIEW for this reason.
    If you need to fix the llb support for Windows Explorer, I would recommend that your perform at least a repair on that feature under Add/Remove programs as an administrator. From your question's description, it sounds like you do not have many priviledges on this particular PC. You may want to just try it first as an admin to make sure.
    Have a good one!
    Charlie S.
    Visit ni.com/gettingstarted for step-by-step help in setting up your system

  • CD ROM/Blu-Ray player now missing in Windows Explorer for HP HDX18

    I currently have a: HP HDX X18T-1100 CTO Premium Notebook PC, product number: FJ927AV
    All of a sudden, I can no longer see the  CD player in windows explorer. If I put a CD in nothing plays, no blu-ray, no DVD, no music CD. If I look at the device in device manager it says there is a problem with the driver. I tried uninstalling the driver and rebooting, but the same thing happens. I also tried numerous Microsoft troubleshooting tips to edit the registry entry and such but the registry entries it says to look for to delete do not exist. I can't find any drivers for my CD ROM on-line to try and re-download.
    I had to uninstall Itunes the other day and re-install it. I see this effects Sony laptops with the exact same CD-ROM drive (optiarc BD-5500s) but I can't find a fix for my HP laptop. I am currently running Windows 8.1.

    Hi  Williamr2042,
    Welcome to the HP forum!
    When I checked the driver page for your computer, HP only list drivers up  to  Windows 7. Unfortunately when researching, I was unable to locate any drivers for the BD Rom BC-5500S ATA Device and Windows 8.1.
    Sparkles1
    I work on behalf of HP
    Please click “Accept as Solution ” if you feel my post solved your issue, it will help others find the solution.
    Click the “Kudos, Thumbs Up" on the bottom right to say “Thanks” for helping!

  • JDK 1.6 u12 installation on Windows XP as non-admin user

    I am working on a machine which does not grant my user the admin rights. I had wanted to use JDK with Netbeans. The Netbeans was available as ZIP file, but it required pre-installed JDK. I am not able to install JDK (latest version 1.6 u12) as non-admin user. Is this even possible and how?
    Operating System : Windows XP (SP3)
    JDK Version : 1.6 update 12
    User : Non-Administrator
    Thanks,
    Akbar.

    Contact your admin and ask him to install or to give you local admin rights.

  • Enable Windows Explorer for LLB in LabVIEW 8.5.1

    I have a fresh install of LabVIEW 8.5.1.  I would like to treat an llb as a folder in Windows Explorer like I have in the past.  The only problem is that this option was typically available in Tools->Options->Environment.  I doesn't appear to be there in my 8.5.1 installation.  Is there an alternate procedure I can use to turn on this feature in 8.5.1?  It would be a shame if this functionality has gone away.  My OS is XP Pro.
    Thanks,
    Greg

    Hi Greg,
    There is a workaround for using Windows Explorer instead of LLB manager to handle your LLBs. This knowledgebase explains the steps.
    Instead of using Windows Explorer, LabVIEW 8.5+ uses LLB Manager. This information can be found on the upgrade notes for 8.5.
    Warm regards,
    Karunya R
    National Instruments
    Applications Engineer

  • Free disk space is reported as "working" by Windows Explorer for shares crossing 92TB

    Hello,
    We have shared a folder from Unix box using Samba and the disk space is about 92.5TB. After mapping the share on Windows 7 client, if we view the properties of the mapped share, the free space and the capacity are reported as "working". On the other
    hand, if the disk space is about 90.5TB, free space and capacity are reported correctly in bytes. 
    Also, using the cmd prompt, if we execute "dir" command on the mapped share drive, the free space is correctly reported in bytes both in case of 90.5TB and 92.5TB. 
    Can you please let me know if there is a limitation with Windows explorer in displaying disk capacity if the disk size is more than 92TB?
    Thanks,
    Shilpa

    Hi,
    We would do something test about this result, and then update this thread as soon as possible.
    Alex Zhao
    TechNet Community Support

  • Windows Explorer for Windows 7.1 32-bit does not display pdf title

    Using Adobe Reader XI version 11.0.08 the pdf title does not display in the Title column of Windows Explorer.  This worked under Windows XP 32-bit
    How is this fixed?
    wojw

    Here is the screen shot. Notice the Title column is empty.

  • In Windows Explorer, I can copy and paste a path and send it to another user as a link to a file location. Is there a way to do that with Finder?

    If not with Finder, is there some other way to do it simply with Mountain Lion OS?

    Thanks for your suggestion Eric. I ended up finding a very simple way to copy a path. When you have navigated to the location for the path in Finder, simply right click on the folder and choose "get info". The path will be displayed in the info window and it can be selected and copied. Then it can be pasted into any text doc or field.

  • Ipod recognized in Windows Explore for about 10 secs & then disappears

    Awhile ago my computer was out to get serviced so b4 it left, I decided to put back up my song files onto my ipod since i was using way less than half the space on there. As soon as i did this, my ipod started freezing and the the sad face ipod appear. Randomly it would start up asking what language I wanted 2 use and all the songs would be "deleted" I restarted it and magically the songs would be back on there.
    So when i got my computer back I tried to delete the files I had saved on there but in the middle of the process it said one of the files was in use and wouldnt let me delete it. Magically my ipod started working again, although it freezes sometimes but i would reset it, files disappeared, reset again and they would be back.
    Recently the ipod sad face showed up again & even though i would try to reset it, it wouldnt go away. I just left it alone 4 a week and then charged it but nothing happened. Another week later i was chargin it again and when i came back in the room, the menu was up. The ipod worked 4 about a week (with the sad face ipod showing up any time u tried to skip a song). After awhile the reset thing didnt work. So I tried to restore it. I am able to put it into disk mode & when i connect to my computer everything appears to be going well. it shows up in my computer for a couple of secs and then it's dropped and the ipod updater says that the ipod cant mount. Does anybody know how 2 correct this.

    I had a problem like that and Ithink it solved itself by checking an option in I-tunes.
    I can't find exactly what option (I don't use I tunes, because it doesn't do what I want), but it was an option like 'Show Ipod as virtual drive' or something like that.
    Choosing that option showed my Ipod, but I'm not sure it was that, because I had so many problems installing it.
    Hope this helps a little.

  • Windows Explorer Search problems for PDF's - Windows 7 - Acrobat 10.x and 11.x

    Hello,
    If this is in the wrong forum please move it.
    I work in an enterprise environment and our systems are having trouble searching file contents in Windows Explorer using Acrobat X and Windows 7 32 bit. The files are on a mapped network location.
    After removing all adobe products from a test machine and reinstalling the Acrobat 10.0.0 software the windows explorer search function seems to work locally but once I install Acrobat 10.1.anything update, it will fail. It never worked on a networked location.
    I have also tried installing Adobe Acrobat 11.0.00 after removing 10.0. Then I made sure my indexing settings were setup to index files and contents and made sure the .pdf extension was selected under file types.
    I then created a mapped drive to the network location, and setup my indexing to the folder on that network drive. I was able to do this by installing this Microsoft Add-in that allows use of UNC paths in the indexing.
    http://www.microsoft.com/en-us/download/confirmation.aspx?id=3383
    Once I set this up, I rebuilt my index and restarted the computer. This is where it gets weird. I can now search the contents of PDF files in this indexed network location, but only by one letter. Searching "c type:pdf" will produce results, but "co type:pdf" will not. I know for sure some of the documents have the work Comment in there so this should should up.
    Does anyone have experience getting this to work correctly with the latest versions of Adobe Acrobat X or XI and Windows 7 32 bit? It would be greatly appreciated.
    Thank you.

    I am surprised you got a search of contents to work in Win7. MS changed the process and I have not seen a fix as there was with XP. The search engine of Win7 was designed only to search MS documents and other designated documents from MS. For Win7, the solution is typically to use a third party search engine. I had to use a 3rd party program when I was searching the content of non-MS files. An additional issue with a PDF is that it is a binary file and you may not find text or such, particularly if encryption is set.

  • Restore thumbnails for .ai files in Windows Explorer

    Please please please? I spend so much time now trying to find the .ai files I need - Bridge is really really slow, and so I end up navigating to files in Windows Explorer, then opening Bridge and navigating to the same location in Bridge and then waiting up to two minutes for the previews to show up. It's almost easier to just open the actual files and look at them rather than trying to get a preview.
    CS3 Win XP

    One other thing to explore - do these particular files begin with Black Video?
    Good luck,
    Hunt

Maybe you are looking for

  • JDBC comm.channel issue with MS SQL select statement

    Hello, We are using JDBC adapter to connect to an MS SQL database. This is the comm.channel config. com.microsoft.sqlserver.jdbc.SQLServerDriver jdbc:sqlserver://<DNSname>:1433;databaseName=PSMI Activation of channel is successful. But when starting

  • Using Substitution (GGB1) to change Cost Center assigned in (OKB9)

    Dear all, SAP Platform: ECC6 I've configured both VKOA (GL assignment) and OKB9 (auto acct assignment) for sales billing. In OKB9, I've mapped one cost center to one GL, i.e. GL-123456 = Cost-center-A. Alright, now that I've a specific condition that

  • QM info record not applicable

    Hi expert I have active QM Info Record In all the plant. Now scenario is like that. If am procuring material for R & D purpose the system should not ask for QM info record and time of migo the material should directly goes to unrestricted. Regard Nab

  • Hyperlinks don't change color

    Why don't my hyperlinks change color? They all work fine but I can"t seem to get them to do the color change when I roll over them. The hyperlinks remain black . I am using iWeb 06. Do I have to update to iWeb 08?

  • Piot table customized grouping of column header

    Dear Friends. I have a requirement from the client. I have 4 measures with the column heading A,B,C,D year wise Now my requirment in I want to add header on top of the A,B,C,D column, Say X and Y. Under X - A,B and under Y-C,d will be grouped. ......