Unfortunately, meaningful corporate restriction GPO updates often straggle behind the release of a version of Windows. Perhaps Update 2 will bring something useful? Who knows...
*ASB **http://XeeMe.com/AndrewBaker* <http://xeeme.com/AndrewBaker> *Providing Virtual CIO Services (IT Operations & Information Security) for the SMB market...* On Fri, May 2, 2014 at 9:45 AM, James Rankin <[email protected]> wrote: > True, but I suspect the fact that the Modern interface is not very easy to > control by GPO will lead to more holes than just this one that was > identified. I could mitigate one issue, but I'd be at risk of any others. > > > On 2 May 2014 14:42, Don Ely <[email protected]> wrote: > >> Silly question.... If you have a wpad configuration, it shouldn't >> matter what they do to the proxy settings if configured correctly. >> Additionally, and ACL on your edge to allow outbound Internet access from >> specified hosts only would really put a damper on any messing with proxy >> settings... >> On May 2, 2014 6:17 AM, "James Rankin" <[email protected]> wrote: >> >>> Well, software restriction doesn't seem to cut it either. But I did find >>> a way to kill it - by downloading and using WinAero's "CharmsBarKiller" >>> utility. >>> >>> Pretty much says it all that Windows 8.1 can't be satisfactorily >>> configured for this particular environment without a third-party piece of >>> software. The developer seems to be a legitimate Windows-tweaker (the fact >>> that he is Russian managed to fire my malware-paranoia), but I doubt very >>> much that this client will be happy relying on a third-party freeware tool >>> for configuring their production systems. >>> >>> Looks like I am going to have to actually recommend that they stick with >>> Windows 7 for now. Very disappointing - but I can't help think that there >>> will be more settings exposed through the Charms bar allowing circumvention >>> of policy. The proxy setting could just be the tip of the iceberg, so >>> mitigating that through other means isn't really a suitable solution. >>> >>> All in all, a quite annoying fact-finding exercise about Windows 8.1's >>> policy limitations. >>> >>> Cheers, >>> >>> >>> >>> >>> JR >>> >>> >>> On 1 May 2014 16:33, James Rankin <[email protected]> wrote: >>> >>>> Looks like we were on the right track earlier regarding this....let's >>>> see if this helps >>>> >>>> I still find it completely backwards, if I've got to use a whitelisting >>>> feature to give myself the sort of desktop functionality that was so much >>>> easier in Windows 7. Surely it can't be that hard to write a GPO that just >>>> turns off all the Modern entry points? >>>> >>>> I haven't even got as far as seeing if the "Desktop" IE GPOs work the >>>> same for the "Modern" version of the browser..... >>>> >>>> cheers, >>>> >>>> >>>> JR >>>> >>>> >>>> On 1 May 2014 16:27, Kennedy, Jim <[email protected]> wrote: >>>> >>>>> Found it. It is applocker. It is located in >>>>> c:\windows\immersivecontrolpanel and my applocker won't let a user run >>>>> from >>>>> that directory. >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> *From:* [email protected] [mailto: >>>>> [email protected]] *On Behalf Of *James Rankin >>>>> *Sent:* Thursday, May 1, 2014 11:24 AM >>>>> >>>>> *To:* [email protected] >>>>> *Subject:* Re: [NTSysADM] Disable the f**king Charms bar in Windows >>>>> 8.1 >>>>> >>>>> >>>>> >>>>> I've just disconnected from this customer :-) >>>>> >>>>> is it SystemSettings.exe, by any chance? I'm sure that's the one the >>>>> GPO restricts >>>>> >>>>> >>>>> >>>>> On 1 May 2014 16:14, Kennedy, Jim <[email protected]> >>>>> wrote: >>>>> >>>>> The plot thickens. There is nothing in my RSOP that should be stopping >>>>> this.. The message leads me to believe it is a software restriction >>>>> perhaps. Please fire that up and hit your task manager and figure out >>>>> what >>>>> the exe and path is so I can chase that. I would do it but I'm restricted >>>>> :P~ >>>>> >>>>> >>>>> >>>>> *From:* [email protected] [mailto: >>>>> [email protected]] *On Behalf Of *James Rankin >>>>> *Sent:* Thursday, May 1, 2014 10:47 AM >>>>> >>>>> >>>>> *To:* [email protected] >>>>> *Subject:* Re: [NTSysADM] Disable the f**king Charms bar in Windows >>>>> 8.1 >>>>> >>>>> >>>>> >>>>> Only setting I can find for "disable computer management" is around >>>>> the MMC restrictions. That doesn't do anything with the settings bar....if >>>>> you get a minute after your cutover when you could find out how you've >>>>> done >>>>> it, I would be grateful :-) >>>>> >>>>> Otherwise I will keep digging myself. >>>>> >>>>> Cheers, >>>>> >>>>> JR >>>>> >>>>> >>>>> >>>>> On 1 May 2014 15:23, Kennedy, Jim <[email protected]> >>>>> wrote: >>>>> >>>>> I think the setting you want is 'disable computer management'. That is >>>>> the one that seems to be killing it here without killing the control >>>>> panel. >>>>> >>>>> >>>>> >>>>> *From:* [email protected] [mailto: >>>>> [email protected]] *On Behalf Of *Kennedy, Jim >>>>> *Sent:* Thursday, May 1, 2014 10:22 AM >>>>> *To:* [email protected] >>>>> *Subject:* RE: [NTSysADM] Disable the f**king Charms bar in Windows >>>>> 8.1 >>>>> >>>>> >>>>> >>>>> All of my control panel items are availabile, James must have some >>>>> other setting in place in addition. I will start digging right now, I got >>>>> distracted by an ASA issue...we are cutting over our ISP real soon. >>>>> >>>>> >>>>> >>>>> *From:* [email protected] [ >>>>> mailto:[email protected] <[email protected]>] >>>>> *On Behalf Of *Charles F Sullivan >>>>> *Sent:* Thursday, May 1, 2014 10:07 AM >>>>> *To:* [email protected] >>>>> *Subject:* Re: [NTSysADM] Disable the f**king Charms bar in Windows >>>>> 8.1 >>>>> >>>>> >>>>> >>>>> Just trying to understand this fully, since it really has my interest. >>>>> Do you mean that with that GP setting in place, there is no way to get to >>>>> the Control Panel, or just not via the Charms? For example, if you right >>>>> click on the Start Button and choose it that way. >>>>> >>>>> >>>>> >>>>> On Thu, May 1, 2014 at 9:31 AM, James Rankin <[email protected]> >>>>> wrote: >>>>> >>>>> Yes, Change PC Settings now gone (good!) - but now if I click on >>>>> Control Panel, I get "operation cancelled due to restrictions in >>>>> effect....etc." (bad!). Users here will be up in arms if they can't get >>>>> access to change mouse sensitivity, accessibility options, etc. which they >>>>> are used to doing through Control Panel. >>>>> >>>>> Hate to say this but Windows 8.1 just isn't really suitable for >>>>> enterprise deployment, based on the experiences I am having here. I'd love >>>>> to be corrected in this viewpoint though.... >>>>> >>>>> >>>>> >>>>> On 1 May 2014 14:25, James Rankin <[email protected]> wrote: >>>>> >>>>> The only problem is, I think this also disables all Control Panel >>>>> items, which I don't want to do....one step forward, two back :-( >>>>> >>>>> >>>>> >>>>> On 1 May 2014 14:24, James Rankin <[email protected]> wrote: >>>>> >>>>> Just discovered Prohibit Access to PC Settings in my GPOs >>>>> list....let's see if this helps, I'm assuming it was the one Jim was >>>>> referring to :-) >>>>> >>>>> >>>>> >>>>> On 1 May 2014 13:56, James Rankin <[email protected]> wrote: >>>>> >>>>> Anything to close the various parts of this annoying thing off would >>>>> help, please do dig it up, cheers! >>>>> >>>>> >>>>> >>>>> On 1 May 2014 13:52, Kennedy, Jim <[email protected]> >>>>> wrote: >>>>> >>>>> When I select 'Change PC Settings' I get blocked by one of my >>>>> GPO's. If you want to go that route let me know and I will dig in and >>>>> find >>>>> out which it is. >>>>> >>>>> >>>>> >>>>> *From:* [email protected] [mailto: >>>>> [email protected]] *On Behalf Of *James Rankin >>>>> *Sent:* Thursday, May 1, 2014 8:48 AM >>>>> *To:* [email protected] >>>>> *Subject:* Re: [NTSysADM] Disable the f**king Charms bar in Windows >>>>> 8.1 >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> But, I can still alter the proxy through Charms menu and select >>>>> Settings, Change PC Settings, Network, Proxy, and find that the box is >>>>> there to change it. >>>>> >>>>> Does your testing show different? I'd be interested to know if it was >>>>> something peculiar to this environment. >>>>> >>>>> Cheers, >>>>> >>>>> >>>>> >>>>> JR >>>>> >>>>> >>>>> >>>>> On 1 May 2014 13:39, Rod Trent <[email protected]> wrote: >>>>> >>>>> Right-click on the taskbar, choose properties, goto the Navigation tab. >>>>> >>>>> >>>>> >>>>> *From:* [email protected] [mailto: >>>>> [email protected]] *On Behalf Of *James Rankin >>>>> *Sent:* Thursday, May 1, 2014 7:59 AM >>>>> *To:* [email protected] >>>>> *Subject:* [NTSysADM] Disable the f**king Charms bar in Windows 8.1 >>>>> >>>>> >>>>> >>>>> Does anyone know how to kill this annoyance? >>>>> >>>>> I've disabled the top left and top right mouse "hot corners" using the >>>>> Registry, but if I move the mouse to the bottom right-hand corner of the >>>>> screen and move it up along the edge, that wretched Charms bar appears. >>>>> >>>>> I need to disable this because users can use the Charms bar to bypass >>>>> the proxy, amongst other things, even though I've got all these settings >>>>> locked down via GPO. I'd prefer to do this via a Registry setting to make >>>>> sure it stays put. >>>>> >>>>> Does anyone have a way of making this damned thing go away? It's >>>>> driving me insane as I am now spending way too much time doing the desktop >>>>> UX than I had planned for.... >>>>> >>>>> Cheers, >>>>> >>>>> >>>>> >>>>> -- >>>>> >>>>> *James Rankin* >>>>> --------------------- >>>>> RCL - Senior Technical Consultant (ACA, CCA, MCTS) | The >>>>> Virtualization Practice Analyst - Desktop Virtualization >>>>> http://appsensebigot.blogspot.co.uk >>>>> >>>>> >>>>> >>>>> >>>>> -- >>>>> >>>>> *James Rankin* >>>>> --------------------- >>>>> RCL - Senior Technical Consultant (ACA, CCA, MCTS) | The >>>>> Virtualization Practice Analyst - Desktop Virtualization >>>>> http://appsensebigot.blogspot.co.uk >>>>> >>>>> >>>>> >>>>> >>>>> -- >>>>> >>>>> *James Rankin* >>>>> --------------------- >>>>> RCL - Senior Technical Consultant (ACA, CCA, MCTS) | The >>>>> Virtualization Practice Analyst - Desktop Virtualization >>>>> http://appsensebigot.blogspot.co.uk >>>>> >>>>> >>>>> >>>>> >>>>> -- >>>>> >>>>> *James Rankin* >>>>> --------------------- >>>>> RCL - Senior Technical Consultant (ACA, CCA, MCTS) | The >>>>> Virtualization Practice Analyst - Desktop Virtualization >>>>> http://appsensebigot.blogspot.co.uk >>>>> >>>>> >>>>> >>>>> >>>>> -- >>>>> >>>>> *James Rankin* >>>>> --------------------- >>>>> RCL - Senior Technical Consultant (ACA, CCA, MCTS) | The >>>>> Virtualization Practice Analyst - Desktop Virtualization >>>>> http://appsensebigot.blogspot.co.uk >>>>> >>>>> >>>>> >>>>> >>>>> -- >>>>> >>>>> *James Rankin* >>>>> --------------------- >>>>> RCL - Senior Technical Consultant (ACA, CCA, MCTS) | The >>>>> Virtualization Practice Analyst - Desktop Virtualization >>>>> http://appsensebigot.blogspot.co.uk >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> -- >>>>> >>>>> Charlie Sullivan >>>>> >>>>> Sr. Windows Systems Administrator >>>>> >>>>> Boston College >>>>> >>>>> 197 Foster St. Room 367 >>>>> >>>>> Brighton, MA 02135 >>>>> >>>>> 617-552-4318 >>>>> >>>>> >>>>> >>>>> >>>>> -- >>>>> >>>>> *James Rankin* >>>>> --------------------- >>>>> RCL - Senior Technical Consultant (ACA, CCA, MCTS) | The >>>>> Virtualization Practice Analyst - Desktop Virtualization >>>>> http://appsensebigot.blogspot.co.uk >>>>> >>>>> >>>>> >>>>> >>>>> -- >>>>> >>>>> *James Rankin* >>>>> --------------------- >>>>> RCL - Senior Technical Consultant (ACA, CCA, MCTS) | The >>>>> Virtualization Practice Analyst - Desktop Virtualization >>>>> http://appsensebigot.blogspot.co.uk >>>>> >>>> >>>> >>>> >>>> -- >>>> *James Rankin* >>>> --------------------- >>>> RCL - Senior Technical Consultant (ACA, CCA, MCTS) | The Virtualization >>>> Practice Analyst - Desktop Virtualization >>>> http://appsensebigot.blogspot.co.uk >>>> >>> >>> >>> >>> -- >>> *James Rankin* >>> --------------------- >>> RCL - Senior Technical Consultant (ACA, CCA, MCTS) | The Virtualization >>> Practice Analyst - Desktop Virtualization >>> http://appsensebigot.blogspot.co.uk >>> >> > > > -- > *James Rankin* > --------------------- > RCL - Senior Technical Consultant (ACA, CCA, MCTS) | The Virtualization > Practice Analyst - Desktop Virtualization > http://appsensebigot.blogspot.co.uk >
