next »

[mornevr]

Hi,

This is probably a stupid question, but can someone tell me how to configure Res to automatically start when a specific user logs in?

Thanks

[Yuri]

You could specify [pwfsmgr.exe] to start automatically when an RDP session is connected to the Terminal server, or just publish the executable. On a workstation you could replace the shell.

[mornevr]

That is not quite what I am looking for. I would like to lock down only certain users on a particular machine. Say user1 and user2 share the same workstation. If user1 logs in, he gets the default and normal XP desktop, but if user2 logs in, he needs to be locked down by powerfuse.

Thanks

[Yuri]

You can set the shell on user level.

[mornevr]

I am very new at Res and have had no training, so I am basically an idiot when it comes to this software. You are going to have to explain it a little more for me to understand. Please bare with me.

[Yuri]

There's an entry called [WinLogon] in [SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] that values to explorer.exe. Try changing that to [pwfsmgr.exe] or [pwrstart.exe] including the path to your PowerFuse installation.

[mornevr]

That will change it for anyone who logs into the computer and not just for that specific user?

[Yuri]

HOWTO: Change the shell

To start the RES PowerFuse or RES Subscriber as shell when users log on, an administrator needs to set or change a key on computer or user level in the Windows registry.

User Key: [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
System Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
Value Name: Shell
Data Type: REG_SZ (String Value)
Value Data: Path to executable of new shell

The default paths for RES PowerFuse and RES Subscriber are:
C:\Program Files\RES PowerFuse\pwrstart.exe
C:\Program Files\RES Subscriber\subscriber.exe

[WTFoX]

With the latest version of RES PowerFuse, the 2010 release (RC2 available now) it's possible to set the shell at the properties of an Agent in the RES PowerFuse Management Console. You can choose between 'manual' (explorer.exe) or 'automatic' (pfwsmgr.exe). This actually replaces the free setshell.exe utility and is ofcourse much more friendly from an administrative purpose.

Another friendly method to set the shell, is by using a default RES Wisdom task (set windows shell). You can choose from four options: Windows Explorer, RES PowerFuse, RES Subscriber or Custom.

Both methods are actually using the registry keys earlier mentioned in this thread by Yuri.

[flintstone_ctx]

Create a GPO and attach it to a user group, user deny/apply. In this policy set "custom user interface" under the user part system.

[WTFoX]

Create a GPO and attach it to a user group, user deny/apply. In this policy set "custom user interface" under the user part system.

This is also an option. From my point of view the thing with GPO's is how to make a quick exclusion?