Disable Run as different user using GPO
What GPO setting(s) will disable/Remove "Run as different user" when you hold down the shift key?
July 20th, 2010 6:44pm
What GPO setting(s) will disable/Remove "Run as different user" when you hold down the shift key?
You can use this Group Policy setting so they do not invoke it by moving the the file they need to access on to the network to invoke runas.
User Configuration \ Windows Components \ Windows Explorer \ Do Not Request Alternate Credentials
Registry Entry to Add to disable GUI RunAs - Distribute with login script using a batch file to import registries.
Merge or import norunas.reg to Registry silently:
regedit -s norunas.reg
NORUNAS.BAT
@ECHO OFF
title script > nul
net use X: \\server\share > nul
X: > nul
regedit -s X:\norunas.reg > nul
net use x: /delete > nul
Exit
NORUNAS.REG
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"HideRunAsVerb"=dword:00000001
Unfortunately batch files do not support the UNC variables. The nul's keep the user from seeing the activity, and title > nul prevents them from seeing the name of the batch executing so they can't search for it.
Steve Kline - MCITP
This posting is "as is" without warranties and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
July 20th, 2010 11:48pm