Results 1 to 2 of 2
  1. #1
    New Lounger
    Join Date
    Jul 2014
    Posts
    3
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Hiding Security tab in Windows Explorer from nonadministrator accounts

    Hi there,

    I am looking for a quick way to hide the "Security" tab in Windows Explorer from non-admin accounts, I wrote a GPO that works great, just wondering if anyone knows a shorter (Less Steps) approach?

    Thanks

    #1 Define the restricted group (all users except Administrators)

    a. From Server, Start, Administrative Tools,
    b. Active Directory Users and Computers
    c. My_Network.com
    d. Users
    e. Right-Click
    f. New
    g. Group
    h. Group Name: Hide Security Tab
    i. Group Scope: Global Security
    j. Members
    k. Add
    l. Add users to Hide Security Tab group

    #2 Define the Policy

    a. From Server, Start, Administrative Tools, Group Policy Management.
    b. In the console tree on the left, expand Forest:My_Network.com
    c. Domains
    d. My_Network.com
    e. Group Policy Objects
    f. Right-Click, New
    g. Name: Hide Security Tab
    h. Source Starter GPO: none
    i. Right-Click Hide Security Tab
    j. Edit
    k. User Configuration
    l. Policies
    m. Administrative Template
    n. Windows Components
    o. Windows Explorer
    p. Hide Security Tab "Enabled"


    #3 Apply the Policy

    a. Start, Administrative Tools, Group Policy Management.
    b. In the console tree on the left, expand Forest:My_Network.com
    c. Domains
    d. My_Network.com
    e. Group Policy Objects
    f. Hide Security Tab
    g. Delegation.
    h. Advanced button in the lower-right corner of the display pane.
    i. Hide Security Tab group Read, and Apply group policy



    #4 Link the Hide Security Tab to My_Network.com security


    a. While still in Group Policy Management
    b. Forest:My_Network.com, Domains, My_Network.com
    c. Right-Click on the domain My_Network.com
    d. Link an Existing GPO
    e. Select Hide Security Tab


    #5 Hide Security Tab Security Filtering


    a. While still in Group Policy Management
    b. Forest:My_Network.com, Domains, My_Network.com
    c. Group Policy Objects
    d. Hide Security Tab
    e. Scope
    f. Under Security Filtering
    g. Remove Authenticated Users

    By Default, Hide Security Tab (My_Network.COM\Hide Security Tab) is the only applied object.

  2. #2
    WS Lounge VIP
    Join Date
    Dec 2009
    Location
    Earth
    Posts
    8,179
    Thanks
    47
    Thanked 983 Times in 913 Posts
    Looks correct to me - GPO is not exactly simple, but it is very flexible.

    I would do it differently to you. I'd hide the security tab as the default policy, then create a "show tab" policy and only have it apply to the user group you want. Having an exclusion list is always a better way to manage security because you know at a glance who is exempt from the security.

    cheers, Paul

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •