RE: [ActiveDir] [Active Dir] Print Screen Policy

[Rick Kingslan]

Title: Message

Mike,

 

I knew it was out there - just had to find the right resource site.

 

BTW, nice site.  thanks for the pointer to it.

 

-rtk

---

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thommes, Michael M.
Sent: Wednesday, August 25, 2004 8:30 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] [Active Dir] Print Screen Policy

Check out http://www.winguides.com/registry/display.php/1126/

 

Mike Thommes

 

-----Original Message-----
From: Rick Kingslan [mailto:[EMAIL PROTECTED]
Sent: Wednesday, August 25, 2004 8:02 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] [Active Dir] Print Screen Policy

Honestly, your first step in this quest is to determine what all you want to change, then determine what registry key manages it and what the setting is to implement the behavior that you want.

 

It exists (the ability to do this) as exhibited by the multitude of language sets that exist for the OS.  It's a matter of:

 

1.  Determining the reg key and setting to affect

2.  Using GP and a script (using reg.exe, vbs, js) or custom reg entries

 

It CAN be done.  Just depends on how hard you want to work at it.  As to the print screen, if someone can find the reg key to disable the CAPS LOCK (yes, it's documented what to change, how to re-assign or disable it), then there is a reg key that can kill the Prt Scrn.  You just need to find the secret.

 

Rick Kingslan  MCSE, MCSA, MCT, CISSP
Microsoft MVP:
Windows Server / Directory Services
Windows Server / Rights Management
Windows Security (Affiliate)
Associate Expert
Expert Zone - www.microsoft.com/windowsxp/expertzone
WebLog - www.msmvps.com/willhack4food
 

---

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Wednesday, August 25, 2004 2:58 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] [Active Dir] Print Screen Policy

Yes, Camera's and phone's with cameras are banned from the site, we will also be making users walk through a memory eraser on the way out of the door! ;>

I do not know of any way to centrally manage keyboard mappings....Any ideas?

Sean

"Grillenmeier, Guido" <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 25/08/2004 08:46 Please respond to [EMAIL PROTECTED]

To <[EMAIL PROTECTED]> cc Subject RE: [ActiveDir] [Active Dir] Print Screen Policy

maybe you could reconfigure the print-screen button to activate the screensaver or something similar...
 
but they can still use their photo-cameras to capture stuff from the screen... ;-)  you'll never prevent users from stealing data the "simple" way (no matter how much effort you put into Digital Rights Management).
 
/Guido

---

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Wednesday, August 25, 2004 9:37 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] [Active Dir] Print Screen Policy


Does anyone know of a way to prevent users from performing print screens via AD policy?

We are setting up a secure network and the only access through from our regular LAN is via terminal sessions,
currently no one can print from these sessions or save anything locally but they can still print screens!

Thanks
Sean