Disablecmd; Permission Changes On The Desktop Folder; Preventing File Downloads From Internet Explorer; Preventing Disk-On-Key Access - HP Compaq t5720 Supplementary Manual

DisableCMD

This command provides additional restrictions to a user account. The command prevents users from run-
ning the interactive command prompt, Cmd.exe. This setting also determines whether batch files (.cmd
and .bat) can run on the computer. If you enable this setting and the user tries to open a command win-
dow, the system displays a message explaining that a setting prevents the action.
NOTE: Do not prevent the computer from running batch files if the computer uses logon, logoff, startup,
or shutdown batch file scripts, or for users that use Terminal Services.

Permission changes on the Desktop folder

An administrator can change the security permission on the Desktop folder so that it is read-only.

Preventing file downloads from Internet Explorer

An administrator can set permissions so that a user cannot download files from Internet Explorer. To
restrict a user from downloading files from the Internet:
1. Open Internet Explorer.
Select Tools > Internet Options.
2.
3. Select the Security tab, and then click Custom Level.
Scroll down to Downloads > File Downloads.
4.
Select Disable to prevent Internet downloads.
5.

Preventing Disk-On-Key access

An administrator can disable Disk-On-Keys by performing the following steps:
1. Select Start > Settings > Control Panel > System.
2. Select the Hardware tab.
3. Click Device Manager.
Click Disk Drives to view all available drives.
4.
5. Right-click on the device you wish to disable, and then select Disable.
To disable a USB device, select Universal Serial Bus controllers, then repeat steps 4 and 5.
6.
NOTE: Future types of Disk-on-Keys may be developed that you cannot block using the above method.
7. To prevent users with administrative rights from enabling Disk-on-Keys, you can delete Device Man-
ager after using it to disable the USB devices.

Hiding desktop items on the HP Compaq t57x0 Thin Client

Administrators can remove all or some items from a user's desktop using the hide-stuff.reg file. The hide-
stuff.reg file will remove all icons from the start menu for the default user. It also removes the tray icon. This
will allow the user to only double-click on the IE and/or remote desktop icons that are on the desktop. The
hide-stuff.reg file contents are as follows:
10