A.4.3.9, A.4.3.11 – BECKHOFF IPC-Security User Manual
Page 55
This registry key may contain one of the following values:
Value
Description
0x0
Access to the command line is allowed and batch files may be executed
0x1
Access to the command line is blocked and no batch files may be executed
0x2
Access to the command line is blocked but batch files may be executed
Please note that you may also use a Software Restriction Policy to disable an execution of cmd.exe, as
described in chapter 3.2.3.5.
A.4.3.9. Hiding the network environment
To hide the network environment from the user’s desktop, simply add the DWORD value
{F02C1A0D-BE21-4350-88B0-7367FC96EF3C} to the following registry key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\NonEum\
Setting this key to 1 hides the network environment from the user’s desktop.
A.4.3.10. Disallowing users to add network drives
To hide the Map network drive feature, simply add the DWORD value NoNetConnectDisconnect to the
following registry key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\
By setting this key to 1 hides that feature from the user’s Windows Explorer.
A.4.3.11. Hiding or restricting access to drive letters
To restrict access to drive letters, you need to create a new REG_DWORD called NoViewOnDrive under
the following registry key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\
If this registry key does not exist, you need to create it manually. The value of this key depends on the drive
letters you want to restrict access to and will be calculated according to the following listing:
A 1
B 2
C 4
D 8
E 16
F 32
G 64
H 128
I 256
J 512
K 1024
L 2048
M 4096
N 8192
O 16384
P 32768
Q 65536
R 131072
S 262144
T 524288
U 1048576
V 2097152
W 4194304
X 8388608
Y 16777216
Z 33554432
All 67108863
If you decide to restrict access to the drive letters A, B, D and P the value of the key would be 1+2+8+32768
= 32779. For a combination of A, B and H it would be 131. After you’ve entered the value you need to
IPC Security
55