Ryan,
One more thing I'd like to point out. While it is sometimes easier to do reg hacks than to setup policies, there are a few things to take in mind. If the reg hacks are in the logon script, the savy users will rip them and figure out how to undo them. Also logon scripted reg hacks are normally done in the users' context. They may not have write access to some portions of the registry you're trying to hack.I do most reg hacks when I build my images that I clone. For serious lockdowns, I take away their access to RegEdit. I also change registry permissions. For general policy stuff, I use local or network or group policies. That way they can't rip them and undo them. Also, policies are not limited by user access limitations to certain registry keys.
Have you installed the Windows 2000 Professional Resource Kit yet? If you have, it has a Group Policy Reference that has the info I think you're looking for in the Group Policy Registry Table. The reg hack is:
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
"NoNetConnectDisconnect" Reg_DWord 1
quote:
Remove "Map Network Drive" and "Disconnect Network Drive"
User Configuration\Administrative Templates\Windows Components\Windows Explorer Description
Prevents users from using Windows Explorer or My Network Places to map or disconnect network drives.
If you enable this policy, the system removes the Map Network Drive and Disconnect Network Drive commands from the toolbar and Tools menus in Windows Explorer and My Network Places and from menus that appear when you right-click the Windows Explorer or My Network Places icons. It also removes the Add Network Place option from My Network Places.
This policy does not prevent users from using other methods to connect to network drives, such as by typing the name of a drive in the Run dialog box.
Since savy users can get around this one, you may need to go deeper. I don't remember if I mentioned this, but if you're looking for a commercial product that can lock it down real tight with little effort, checkout http://www.fortres.com/products/fortres_101.htm
They have two products, Fortres 101 and Cooler. Together they are a powerful combo. I use Fortres 101 on about 50 machines here.
Have fun
p.s. HKLM and HKCU are abbreviations.
[ 19 August 2001: Message edited by: LLigetfa ]
I think I could figure out on my own what lines to add to my login script in order to execute the edit or add ... but I'm not sure what I would tell it to do.
