cancel
Showing results for 
Search instead for 
Did you mean: 

Re: Services and Active Directory?

samuria
Grafter
Posts: 1,581
Thanks: 3
Registered: ‎13-04-2007

Re: Services and Active Directory?

What service and do you mean on the domain controller or the local pc?
4 REPLIES 4
Not applicable

Re: Services and Active Directory?

There are a couple of ways of acheiving this.
Perhaps the easiest is to add the startup command to a batch file/script which runs at logon.
Specify that you want the script to be hidden as it runs, and also consider using runas to start the service with a specific account.
You could apply the setting to the computer config part of the GP, but then it applies to the machine, rather than the user, which by the sound of it is not what you want. (Although you could stop it for everyone, and then start it by script for those users you want to have access to it)
What service is it BTW?
Not applicable

Re: Services and Active Directory?

You can hide specified control panel applets, the 'display properties' one for example.
The bad news is, it doesn't prevent the Dell program from running, so they can still change stuff if they want to, and they can still access the program from the contect menu.
Have you had a shufty at the Software Restriction Policies within
User Configuration>Windows Settings>Security Settings

You can define programs on a per group basis preventing specified software from running.
If you combined this to stop the Dell app running, with the Policy to remove access to the Display Properties applet, you'd prevent a group of users from making changes themselves.
You can then define group-wide options for resolution, desktop wallpaper, screensavers etc.
Sound any use?
samuria
Grafter
Posts: 1,581
Thanks: 3
Registered: ‎13-04-2007

Re: Services and Active Directory?

The util must run from somewhere ie startup group or registrar so the best job would to do a one off and remove it from the reg so it never runs again job done.
The other thing to remember is you cant by law stop users changing the screen res as this is a health and safety matter. If a user suffers with head ache or eye problems as a result of a locked down pc  your in big goo goo
If its a service then use this
et, the most refreshing change at the command-line is definitely the new WMI Command-line, or WMIC. WMIC provides a simple command-line interface to Windows Management Instrumentation (WMI). In general, WMI uses Providers that are available to allow managing a wide variety of hardware components, operating system subsystems, and application systems. WMIC enables you to perform operations you needed to script or code prior to the introduction of this tool. It's useful to manage computers running Windows and it interoperates with existing shells and utility commands. You can work with the local computer, remote computers, or multiple computers in a single command. WMIC does not have to be available on the remotely managed computer in order for WMIC to manage it.
It's extremely useful when you want to manage a change across a group of computers. For example, if you want to disable a certain Service for a bunch of PCs, just create a text file with the list of host names, and try the following:
WMIC /NODE:@"c:\ComputerList.txt" SERVICE WHERE caption=
"The Service Name" CALL ChangeStartMode "Disabled"
This will change the start mode of the Service you specify to "disabled" on every computer in the text file list.
Note  You need to be a local administrator on every computer in the list in order for the script to succeed.
from
http://technet.microsoft.com/en-us/library/bb878062.aspx
samuria
Grafter
Posts: 1,581
Thanks: 3
Registered: ‎13-04-2007

Re: Services and Active Directory?

If its used by children you still have to let them change the screen or you are discriminating against disabled as well as H&S. You cant say children dont matter so dont  deserve any H&S applied to them.
Having been there and done that I can assure you that if you dont allow them to change the res its only a matter of time before you get into big trouble. They dont need to turn it upside down but if they cant see to use it then what are they to do? They run home and tell the parents who get onto the Governors  or the LEA.