How to disable Explorer.exe for given user?

2

2

I know the shell registry key to disable it but I don't understand how to disable for specific user. Consider the situation where administrator cannot login user account but want to change user explorer.exe with some other program like iexplore.exe

grvpanchal

Posted 2013-04-30T00:10:40.040

Reputation: 748

1You would probably need to write code to do this. (Basic idea: change the shell to your application, then your application can decide whether to launch explorer.exe, iexplore.exe, or something else, based on the user account.) – Harry Johnston – 2013-04-30T03:56:56.897

Thats a brillian idea. but I read something about loading ntuser.dat to regedit hive. If user is not there ntuser is not there. I Want to do that – grvpanchal – 2013-04-30T11:51:15.743

What exactly do you want? Do you want to prevent the user from starting Explorer.exe? Or do you want Windows to start iexplorer.exe instead of Explorer.exe when the user logs in? – Werner Henze – 2013-04-30T11:51:54.090

In want to change the value of shell in windows registry for specific user. Normally I can change explorer.exe to iexplore on my profile but I want to do for other specific user who hasn't logged on yet. – grvpanchal – 2013-04-30T13:02:32.410

For a user who is not logged on right now, or for a user who has never logged on (a newly created user)? Also: which Windows Version? – Werner Henze – 2013-04-30T13:17:34.823

xp/vista/7.. and for user never logged on – grvpanchal – 2013-04-30T14:38:57.000

1If the user has never logged on, they don't have a profile yet, so you can't modify it. Your only options are to use the equivalent HKLM setting (affecting everyone) or to log the user in once ahead of time. Or you could modify the default hive, affecting all new users. – Harry Johnston – 2013-04-30T22:25:55.603

So can u suggest some batch script or vbs script to do that. I know with %username% in cmd i can get logged in username but i dont know complex script. Can you write that script in answer please – grvpanchal – 2013-05-01T15:41:52.687

Werner's answer is better. – Harry Johnston – 2013-05-03T02:02:25.550

Answers

4

I'ld suggest that you use group policies. Microsoft has a web page how to edit multiple local group policy. One option is to create a group policy for all non-admin users. Another option is to create a group policy for each individual user. You might find it interesting looking at all the possibilities group policies give you.

Under Configuration\Administrative Templates\System you might be interested in Run only allowed Windows applications, Don't run specified Windows applications and Custom User Interface. Group Policy Editor gives you a detailled description for every option.

Werner Henze

Posted 2013-04-30T00:10:40.040

Reputation: 4 214