how to remove default IE icon for new users

[jwt]

Problem I have is if a new user uses a pc XP automatically generates an Internet Explorer icon and a Media player icon in the Start\programs menu.

Have killed these in "all users" and scoured the registry for references but found none.

The only fix appears to be running a script at user logon deleting the lnk files in %username% folders.

Any thoughts on where to kill the icons either through Group policy or in the registry?

Thanks

JWT

[sleepnmojo]

internet explorer

%SYSTEMROOT%\system32\shmgrate.exe OCInstallHideIE

outlook express

%SYSTEMROOT%\system32\shmgrate.exe OCInstallHideOE

windows media player

%SYSTEMROOT%\INF\unregmp2.exe /HideWMP /SetShowState

[prathapml]

jwt, if the icons (therefore access to these programs) is all you're bothered about, you can do a simpler thing:

1. Confirm that you have SP1 or SP2 for Windows XP installed on your system.

2. Go to "Control Panel >> Add or Remove Programs" and choose "Set program access and defaults" from left pane.

3. Choose "Custom" and remove the "tick-mark" from "Enable access to this program" for IE, OE and WMP.

Hoping this helps....

[jwt]

WOW!

Both answers are spot on.

For new images I will use the Access method,

but the shmgrate.exe methopd allows me to push that policy to existing users.

Any thoughts on what registry settings the access method tickles?

Strangely enough for some users I need to be able to block access to IE but for others they'll get it but only through a shortcut applied through a GPO setting the homepage, favourites etc.

Much appreciate the fast replies, you've saved me a lot of work.

Thanks

JWT

[sleepnmojo]

Truth is what I pulled is exactly what the "Set program access and defaults" method is doing. These are the commands they call, and are pulled straight from the registry.

As far as a registry key doing what the commands are doing, there are none that I'm aware of. You could try taking a snapshot of the registry before and after running the commands, but I believe it is more than registry entries that are modified.

I run these three commands in my cleanup.cmd file, and works like a charm. The access to these programs still exists somehow, even though some take away the executable.

[prathapml]

hey jwt,

for new images, do you use RIS or unattended install in some way?

If so, put the below code section in your winnt.sif (if from CD) or unattend.txt (if from network install):

[Components]
   IEAccess=off
   OEAccess=off
   WMPOCM=off

Its a far simpler way, so that it gets done automatically without you needing to do anything.