PDA

View Full Version : Lock down System Tray, Win2k?



jdharm
01-28-2002, 05:41 PM
Is there any way to restrict access to the system tray in Win2K? I have tried to and rename or remove systray.exe to prevent it from starting but the system restores it about 20 seconds after I do and I can't find any way of changing permissions in such a way that keeps someone from accessing it once the system has started it. I need to keep students from closing teacher control clients from the systray icon. The lame app doesn't have any security of its own.

For what it worth.
I'm just making this up as I go along.
Scoff, ignore, or flame at will.

king_ging
01-28-2002, 05:44 PM
Hi,

try this first
http://www.winguides.com/registry/display.php/159/

if not i should be able to find a 3rd party app

many thanks

alex t

jdharm
01-28-2002, 06:15 PM
Your getting warm. It does restrict the menus for the task bar/system tray, but the apps themselves are still available.

So far the best I have been able to do is use a utility that hides the icons but leaves the clock visible. The problem is that the icons will pop up just by moving the cursor to the far edge of the tray. I don't think they have figured that out yet but it won't fool them for long.

For what it worth.
I'm just making this up as I go along.
Scoff, ignore, or flame at will.<P ID="edit"><FONT class="small">Edited by jdharm on 01/28/02 12:18.</FONT></P>

POBrien
01-28-2002, 06:46 PM
Here it is..

[HKEY_CLASSES_ROOT\CLSID\{35CEC8A3-2BE6-11D2-8773-92E220524153}

remove this class id on all stations via the login script.

example:

copy everything between the lines below into notepad. Save the file as nosystray.reg

__________________________________________________ ________________

Windows Registry Editor Version 5.00

[-HKEY_CLASSES_ROOT\CLSID\{35CEC8A3-2BE6-11D2-8773-92E220524153}]

__________________________________________________ __________________

You can see that a minus sign is needed preceding the subkey path

-HKEY_CLASSES_ROOT

reference:

http://www.winguides.com/article.php?id=1&page=4&guide=registry


run the file in the login script for a couple of days.

After the user logs in the subkey will be removed.

He/she will still need to logout/in at least once before the changes take effect.

jdharm
01-28-2002, 07:45 PM
Alas, no. Tried and it didn't work. But your suggestion got me feeling adventurous so I went through the entire registry and deleted every reference to the 35CEC8A3-2BE6-11D2-8773-92E220524153 string and any reference to "systray". Three restarts later I was still free to shut down any tray application I chose and there were no references to the tray or that string anywhere to be seen in the registry. BTW one of the keys I deleted was:

HKEY_CLASSES_ROOT\CLSID\{730F6CDC-2C86-11D2-8773-92E220524153}

refering to the system tray invoker.

Thanks anyway.

For what it worth.
I'm just making this up as I go along.
Scoff, ignore, or flame at will.

POBrien
01-28-2002, 08:41 PM
Sorry about the false start JD. Based on your actions, I certainly didn't test it thoroughly.