GPO to hide Security Tab in Windows Explorer

Solution


Scary. Testing is what separates us from the monkeys with typewriters!


I just did this and it works, Right Click on a computer folder or file, between Sharing and Previous Versions.

Administrators ses "Security" general users, or users in the Global Group do not

#1 Define the restricted group (all users except Administrators)

a. From Server, Start, Administrative Tools,
b. Active Directory Users and Computers
c. MyDomainName.com
d. Users
e. Right-Click
f. New
g. Group
h. Group Name: Hide Security Tab
i. Group Scope: Global Security
j. Members
k. Add
l. Add users to Hide Security Tab group

#2 Define the Policy

a. From Server, Start, Administrative Tools, Group Policy Management.
b. In the console tree on the left, expand Forest:MyDomainName.com
c. Domains
d. MyDomainName.com
e. Group Policy Objects
f. Right-Click, New
g. Name: Hide Security Tab
h. Source Starter GPO: none
i. Right-Click Hide Security Tab
j. Edit
k. User Configuration
l. Policies
m. Administrative Template
n. Windows Components
o. Windows Explorer
p. Hide Security Tab "Enabled"


#3 Apply the Policy

a. Start, Administrative Tools, Group Policy Management.
b. In the console tree on the left, expand Forest:MyDomainName.com
c. Domains
d. MyDomainName.com
e. Group Policy Objects
f. Hide Security Tab
g. Delegation.
h. Advanced button in the lower-right corner of the display pane.
i. Hide Security Tab group Read, and Apply group policy


#4 Link the Hide Security Tab to MyDomainName.com security

a. While still in Group Policy Management
b. Forest:MyDomainName.com, Domains, Crossbow.com
c. Right-Click on the domain MyDomainName.com
d. Link an Existing GPO
e. Select Hide Security Tab

#5 Hide Security Tab Security Filtering

a. While still in Group Policy Management
b. Forest:MyDomainName.com, Domains, Crossbow.com
c. Group Policy Objects
d. Hide Security Tab
e. Scope
f. Under Security Filtering
g. Remove Authenticated Users

By Default, Hide Security Tab (MyDomainName.COM\Hide Security Tab) is the only applied object.


 


sorry, always looking for a shorter (quicker) solution. I'd love to be a GPO guru, but I have no development or test server and desktop, everything is live,

B.
 


Scary. Testing is what separates us from the monkeys with typewriters!
 
Solution