question

MdRejaulKarim-5428 avatar image
0 Votes"
MdRejaulKarim-5428 asked saldana-msft edited

Create a GPO to remove "Give Access to option" from Windows Explorer Context Menu from all devices.

Hi Guys,
I am trying to remove the option "Give Access to option" from Windows Explorer Context Menu from all devices in our company.
I have found the below procedure to follow and its working when I setup in 1 device.
1.Press Windows Key + R then type regedit and hit Enter to open Registry Editor.


2.Navigate to the following registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions
3.Right-click on Shell Extension then select New > Key.


4.Name this newly created key as Blocked and hit Enter. If the Blocked key is already present then you can skip this step.
5.Now right-click on Blocked then select New > String Value.


6.Name this string as {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} and hit Enter.



I am trying to create a GPO which will do this for all the device in the company.

I have tried creating a GPO under Computer Configuration->Preferences->Registry->New->Registry Item
After this I am sort of stuck.

15945-image.png



I can do the Steps 1-3 but according to the steps 4. I need to create a new key name Blocked.
I don't see any option to create that.

I can do the steps 6.Name this string as {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} and hit Enter.
Can some one please help.

Regards

windows-10-generalwindows-group-policy
image.png (73.3 KiB)
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,
Would you please tell me how things are going on your side. If you have any questions or concerns about the information I provided, please don't hesitate to let us know.
Again thanks for your time and have a nice day!

Best Regards,
Daisy Zhou

0 Votes 0 ·

Hello MdRejaulKarim-5428,

I am just writing to see if this question has any update. If anything is unclear, please feel free to let us know.

Thanks for your time and efforts.

Best Regards,
Daisy Zhou

0 Votes 0 ·

1 Answer

DaisyZhou-MSFT avatar image
0 Votes"
DaisyZhou-MSFT answered DaisyZhou-MSFT edited

Hello MdRejaulKarim-5428,

Thank you for posting here.

Based on the description, I did a test in my lab, and it works fine.

We can try the steps below:
1.Create an OU and put all devices we want into this OU.
2.Create a GPO and link it to the OU above.
3.Edit the GPO as below: navigate to Computer Configuration->Preferences->Windows Settings->Registry->New ->Registry Item

Action: Update
Hive: HKEY_LOCAL_MACHINE
Key Path: SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked (we add "\Blocked")
Value name
Default: {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}
Value type: REG_SZ
16083-block1.png

4.Run gpupdate /force on one device and check if the GPO takes effect.
16020-bl2.png

Hope the information is helpful. If anything is unclear, please feel free to let us know.


Best Regards,
Daisy Zhou




block1.png (53.0 KiB)
bl2.png (107.8 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.