Microsoft KB Archive/209466

= Disabling Active Desktop Affects Only Users with Administrator Rights on Windows NT =

Article ID: 209466

Article Last Modified on 10/23/2003

-

APPLIES TO


 * Microsoft Internet Explorer Administration Kit 4.01a
 * Microsoft Internet Explorer Administration Kit 5.0
 * Microsoft Internet Explorer Administration Kit 5.01
 * Microsoft Internet Explorer Administration Kit 5.5

-



This article was previously published under Q209466



This article also applies to 5.01 SP1 and 5.5 SP1.



SYMPTOMS
When you create a build of Microsoft Internet Explorer by using the Internet Explorer Administration Kit (IEAK), you can choose to disable the Active Desktop. However, this restriction does not get applied to Microsoft Windows NT users without administrator rights.



RESOLUTION
To work around this issue, use any text editor (such as Notepad) to edit the Sp1shell.adm file in the :\Program Files\Ieak\Policies\  folder, where   is the drive on which you installed the IEAK, and   is the language for which you are creating your build (for example, "en" for English).

Change



CLASS USER ;;;;;;;



To:



CLASS MACHINE;;;;;



NOTE: Make sure to select not only the Disable Active Desktop option during the "System Policies and Restrictions" portion of the IEAK Wizard (under WebDesktop/Desktop), but also select the following restrictions:


 * Remove Active Desktop item from the Settings menu
 * Remove the Folder Options menu item from the Settings menu

You can specify these restrictions during the "System Policies and Restrictions" portion of the IEAK Wizard as well (under WebDesktop/Start Menu).

If you do not set these restrictions, users can enable the Active Desktop without its full functionality. This can lead to other problems.

NOTE: When you choose to remove the Folder Options menu item from the Settings menu, you may encounter the issue described in the following Microsoft Knowledge Base article:

258657 Missing Options on Tools Menu in Internet Explorer 5.x

Keywords: kbenv kbprb KB209466

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.