Skip to content

1.Practical implementation

Scenario: 1.Disable run 2.Unified background across the domain

Disable run

First on the AD :

  1. Open the Domain Controller
  2. From Start => Search for Group Policy Management Console (GPMC).
  3. Create a new GPO
    1. Right click on the Domain → choose Create a GPO in this domain, and Link it here.
    2. Name it Disable_Run

  1. Right click on the GPO → choose Edit

  2. From the Group Policy Management Editor:

    1. open User Configuration :
    2. → Administrative Templates

    1. → Start Menu and Taskbar

      1. Locate Remove Run menu from Start Menu :

      2. Double-click on it → select Enabled → Apply → OK :

THE BIG ERRORR And Solved :

  • Here I faced a problem, the user I rented was in an old OU, so I had to make a link between them as follows :
    • Open Group Policy Management (GPMC).
    • Locate the OU containing the user (IT_Department).

    • Right-click on it and select Link to an Existing GPO.

      • Select the GPO you created (Disable_Run)
        • After linking:
      • Open the GPO → Scope tab → Make sure Authenticated Users is present in Security Filtering :

Secondly, on the Client :

Go to the Client device and do the following:

  1. open CMD :

  3. This will perform a forced Group Policy update, so that the changes you made to the Domain Controller are immediately applied to the device.

After solving the problem on the client device:

  • On Client VM :

  • After logging back in as User2 → try:

    • Win + R → It doesn't open.

DONE

----

Steps to create a unified background across the domain :

  1. Prepare the background image 1. Prepare the image (for example: wallpaper.jpg). 2. Place it in a shared folder on the Domain Controller or any server.

    1. Make it available to users as read-only:
      1. Right click → Properties → Sharing → Advanced Sharing → Share.
      2. Permissions → Everyone → Read ✅.

  2. 2- Create a Group Policy

    • Open Group Policy Management (GPMC).
    • Right-click the Domain (NTI.local) → Create a GPO in this domain, and Link it here.
    • Name it, for example: Domain_Background :

  3. Edit the policy

    1. Right-click the GPO (Domain_Wallpaper) → Edit.
    2. From the Group Policy Management Editor, go to:
    3. User Configuration
      1. → Administrative Templates
      2. → Desktop → Desktop

    4. Right-click on Desktop Wallpaper.

    5. Choose: Enabled.

      1. In Wallpaper Name, enter the full path to the image:

  1. In Wallpaper Style → choose (Fill / Stretch / Center). => Apply → OK.

  2. Don't forget to link the GPO to the OU

on the Client :

On any Client device :

On the client :

✅ Lab is Done

---

Abdelwahab Shandy Linkedin GitHub