A.4.3.9, A.4.3.11 – BECKHOFF IPC-Security User Manual

Page 55

Advertising
background image

This registry key may contain one of the following values:

Value

Description

0x0

Access to the command line is allowed and batch files may be executed

0x1

Access to the command line is blocked and no batch files may be executed

0x2

Access to the command line is blocked but batch files may be executed

Please note that you may also use a Software Restriction Policy to disable an execution of cmd.exe, as
described in chapter 3.2.3.5.

A.4.3.9. Hiding the network environment

To hide the network environment from the user’s desktop, simply add the DWORD value
{F02C1A0D-BE21-4350-88B0-7367FC96EF3C} to the following registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\NonEum\

Setting this key to 1 hides the network environment from the user’s desktop.

A.4.3.10. Disallowing users to add network drives

To hide the Map network drive feature, simply add the DWORD value NoNetConnectDisconnect to the
following registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\

By setting this key to 1 hides that feature from the user’s Windows Explorer.

A.4.3.11. Hiding or restricting access to drive letters

To restrict access to drive letters, you need to create a new REG_DWORD called NoViewOnDrive under
the following registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\

If this registry key does not exist, you need to create it manually. The value of this key depends on the drive
letters you want to restrict access to and will be calculated according to the following listing:

A 1

B 2

C 4

D 8

E 16

F 32

G 64

H 128

I 256

J 512

K 1024

L 2048

M 4096

N 8192

O 16384

P 32768

Q 65536

R 131072

S 262144

T 524288

U 1048576

V 2097152

W 4194304

X 8388608

Y 16777216

Z 33554432

All 67108863

If you decide to restrict access to the drive letters A, B, D and P the value of the key would be 1+2+8+32768
= 32779. For a combination of A, B and H it would be 131. After you’ve entered the value you need to

IPC Security

55

Advertising