Title: RE: [ActiveDir] Background
In many cases, GPOs merely hide the user controls. The APIs are still open to run processes in the user's security context if they are called by other means.
 
Your user may have an application (such as an image editor) that allows them to set a picture as the background image.
 
The only way to prevent the change is by applying the appropriate ACEs to the file system and/or registry.
 

__________________
Todd Povilaitis
LAN Administrator
Huntington Hospital
[EMAIL PROTECTED]
Phone: (626) 397-3392
Fax: (626) 397-2901

-----Original Message-----
From: marcus [mailto:[EMAIL PROTECTED]
Sent: Thursday, November 06, 2003 16:58
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Background

The whole idea of forcing a background seems like overkill to me.  You’d think the same color cubicle walls would be depressing enough :-D.

 

At any rate, the background is just a value in the registry, as is the ability to view the background tab.  If you want to lock down the background, change the permissions of the reg key.

 

-m

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John McGlinchey
Sent: Thursday, November 06, 2003 1:51 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Background

 

In my login script, I copy  the standard .bmp file from a network share onto the local workstation.  This keeps them from replacing it for very long.  I've seen some places that point directly to a shared folder for the .bmp instead of locally but I prefer to have the .bmp file local, especially when considering laptop users.

 

John

John McGlinchey                                                      
Windows 2000 MCSE MCSA MCT CCNA CTT+
IMSS Senior Platform Engineer

Bristol-Myers Squibb Company
* email: [EMAIL PROTECTED] - ( phone: 609.818.4698

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A.
Sent: Thursday, November 06, 2003 1:15 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Background

I have done that already

 

-----Original Message-----
From: Raymond McClinnis [mailto:[EMAIL PROTECTED]
Sent: Thursday, November 06, 2003 12:33 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Background

 

I believe a good way to eliminating is to disable active desktop and only allow .BMP wall paper.  I’ve done this and a majority of my users have stopped trying J.  It’s worth a shot…

 

Thanks,

 

Raymond McClinnis

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A.
Sent: Thursday, November 06, 2003 8:39 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Background

 

Can you disable that through a GPO

 

-----Original Message-----
From: Celone, Mike [mailto:[EMAIL PROTECTED]
Sent: Thursday, November 06, 2003 11:20 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Background

 

In Internet Explorer right click an image on a webpage and choose "Set as Background".  Maybe that's how she's doing it?

-----Original Message-----
From: Salandra, Justin A. [mailto:[EMAIL PROTECTED]]
Sent: Thursday, November 06, 2003 11:07 AM
To: ActiveDir (E-mail)
Subject: [ActiveDir] Background

How is it possible that a regular user can change her background if you disable the Background tab through a GPO to all users?  I checked and she doesn't have that tab, the GPO is working correctly.

Justin A. Salandra, MCSE
Senior Network Engineer
Catholic Healthcare System
212.752.7300 - office
917.455.0110 - cell
[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>

List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to