Prohibit Control Panel Throws Vista Error

[anthonymeluso]

I know this was posted in the Windows Sever 2003 board just thought I would get me eyes here.

So for ages now I have enabled Prohibit Access to the Control Panel through group policy. No problems there. However, when I added Vista x64 machines to my network, an standard user now gets an error message that states "This operation has been canceled please contact your system administrator"

If I turn off this setting in group policy no more error message. What on earth could be causing this? My thoughts are with the UAC. If someone can maybe test this out on their network to see if happens there or have any ideas it will be a great help.

 

[linney]

Are you sure this an error message rather than a "by design" type of message from Vista due to your GPO restrictions. While the Control Panel should be removed from the Start Menu (by this GPO), if a smart user tries to access the Control Panel by typing control.exe in the Start Run box, or by any other way, then that message is generated in order to tell them they have been a naughty boy. What information should be provided to the user or what do you want him to see?

"If users try to select a Control Panel item from the Properties item on a context menu, a message appears explaining that a setting prevents the action".

Anyway I can generate that exact message on this Windows 7 (beta) 64-bit machine.

 

[anthonymeluso]

I wasn't clear in my original question. This message is generated when the user logs in.

I know its suppose to pop up when they try to access the control panel. But this message comes up every time when the user just logs on and does nothing.

To me its saying that some part of Windows or some program is trying to access the control panel using the users credentials when they log on.

Any ideas?

 

[smah]

It only happens with x64? Unfortunately, I don't have any x64 machines on my 2003 domain to test with. Not that it should matter, but have you applied the the correct Group Policy update to the x64 clients

http://support.microsoft.com/kb/943729

 

[linney]

What scripts or Startup programs are running at Logon? I don't know if the Java Control Panel Applet is relevant, but Java likes to check for updates regularly, but whether such a thing involves the access to the Control Panel applet, I am not sure?

310560 - How to Troubleshoot By Using the Msconfig Utility in Windows XP (or Vista)

http://support.microsoft.com/default.aspx?scid=kb;en-us;310560&FR=1&PA=1&SD=HSCH

How to troubleshoot a problem by performing a clean boot in Windows Vista

http://support.microsoft.com/default.aspx/kb/929135

 

[anthonymeluso]

I dropped the Vista machines into a clean OU. When I got to "Prohibit Access to the Control Panel" I started getting that error message. I guess I can uninstall Java and see if that's causing the problem. I might just do a clean install and go from there. It's just weird.

 

[linney]

No need to uninstall Java to check if is was a cause, you could just uncheck the Java entry in Msconfig for jusched.exe, which updates Java.