2005-03-16, 07:10 PM
Ok first off hello... first post. I have been playing with GBPVR for 6 months and love it. I recently got a HDTV and wanted to fully integrate GBPVR on only 1 account under WinXP and lock the user to only GBPVR (keep the kids in GBPVR only)
NOTE: this walkthrough requires changes to the registry... Proceed at your own risk.
1. Create an admin account for GBPVR
2. Login to the GBPVR account (The following steps must be done in the account you want GBPVR to auto launch into.)
3. the following steps were taken from a litestep shell replacement FAQ that when edited to use GBPVR instead... works great.Litestep FAQ Page
· Installing GBPVR to auto load on a Per account Basis
* Run regedit.exe to edit your registry.
* Locate this key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\IniFileMapping\system.ini\boot
* Set the 'Shell' string to:USR:Software\Microsoft\Windows NT\CurrentVersion\Winlogon
* Locate this key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer
* Set the 'BrowseNewProcess' string to : yes.
* If you cannot find this setting, create a new string called 'BrowseNewProcess' and set it to : yes.
* Set the DesktopProcess to: 1.
* If you cannot find this setting, create a new DWORD called 'DesktopProcess' and set it to : 1.
* Locate this key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
* If it doesn't exist, create a string value called 'Shell'
* Set the 'Shell' string to : x:\path_to_gbpvr\gbpvr.exe
* If you cannot find this setting, create a new string called 'Shell' and set it to : x:\path_to_ls\litestep.exe.
4. to add security and lock out users ability to launch anything from the Ctrl+alt+del... I found this tidbit to lock out the task manager from all users. Task Manger disable FAQ
There is a registry hack to enable or disable Windows NT TaskManager. The same registry hack applies to Windows 2000 and Windows XP.
Hive: HKEY_CURRENT_USER
Key: Software\Microsoft\Windows\CurrentVersion\Policies\System
Name: DisableTaskMgr
Type: REG_DWORD
Value: 1=Enablethis key, that is DISABLE TaskManager
Value: 0=Disablethis key, that is Don't Disable, Enable TaskManager
As part of the enhanced management available in Windows 2000 and Windows XP, rather than risking a registry change, as an administrator you can enable or disable Windows 2000 Pro or Windows XP Pro's TaskManager using Group Policy Editor. This can be applied to the local policy. Note: if you are trying to override your organizations group policy, you can't. As soon as you re-authenticate to the domain, the domain or OU Group Policy will rewrite the registry setting. But if the TaskManager was accidently disabled or you need to control this item for a set of standalone boxes this is for you:
* Click Start
* Click Run
* Enter gpedit.msc in the Open box and click OK
* In the Group Policy settings window
o Select User Configuration
o Select Administrative Templates
o Select System
o Select Ctrl+Alt+Delete options
o Select Remove Task Manager
o Double-click the Remove Task Manager option
And as I mentioned above, since the policy is Remove Task Manager, by enabling the policy, you are disabling the Task Manager.
Got XP Home - use the registry edit.
5. Log out and log back into the GBPVR account.. Thats it!!!
Thoughts....
-- For some reason GBPVR will not load on a limited access account... need to research this as I would feel better if the GBPVR account was not Admin access.
-- Load the My Video plug-in to add security to your videos by assigning PIN numbers to files you donât want the kids to see.
-- Still to do... I want to add Firefox to GBPVR menu... but set it up to only allow access to site that I have added to the approved list of sites. ( I have researched this and there is a function to do this inside Firefox for locking the users to certain allowed domains)
-- Since GBPVR is loading as the shell... and Explore is not being loaded... you save on memory being used. Also there is no desktop icons, start menu, taskbar, or right click menu... this really locks the account to only allow GBPVR to run or programs that GBPVR has been configured to launch
Anyways... this has worked great for me and I thought I would share the info so others could benefit from it.
SCROFT
NOTE: this walkthrough requires changes to the registry... Proceed at your own risk.
1. Create an admin account for GBPVR
2. Login to the GBPVR account (The following steps must be done in the account you want GBPVR to auto launch into.)
3. the following steps were taken from a litestep shell replacement FAQ that when edited to use GBPVR instead... works great.Litestep FAQ Page
· Installing GBPVR to auto load on a Per account Basis
* Run regedit.exe to edit your registry.
* Locate this key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\IniFileMapping\system.ini\boot
* Set the 'Shell' string to:USR:Software\Microsoft\Windows NT\CurrentVersion\Winlogon
* Locate this key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer
* Set the 'BrowseNewProcess' string to : yes.
* If you cannot find this setting, create a new string called 'BrowseNewProcess' and set it to : yes.
* Set the DesktopProcess to: 1.
* If you cannot find this setting, create a new DWORD called 'DesktopProcess' and set it to : 1.
* Locate this key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
* If it doesn't exist, create a string value called 'Shell'
* Set the 'Shell' string to : x:\path_to_gbpvr\gbpvr.exe
* If you cannot find this setting, create a new string called 'Shell' and set it to : x:\path_to_ls\litestep.exe.
4. to add security and lock out users ability to launch anything from the Ctrl+alt+del... I found this tidbit to lock out the task manager from all users. Task Manger disable FAQ
There is a registry hack to enable or disable Windows NT TaskManager. The same registry hack applies to Windows 2000 and Windows XP.
Hive: HKEY_CURRENT_USER
Key: Software\Microsoft\Windows\CurrentVersion\Policies\System
Name: DisableTaskMgr
Type: REG_DWORD
Value: 1=Enablethis key, that is DISABLE TaskManager
Value: 0=Disablethis key, that is Don't Disable, Enable TaskManager
As part of the enhanced management available in Windows 2000 and Windows XP, rather than risking a registry change, as an administrator you can enable or disable Windows 2000 Pro or Windows XP Pro's TaskManager using Group Policy Editor. This can be applied to the local policy. Note: if you are trying to override your organizations group policy, you can't. As soon as you re-authenticate to the domain, the domain or OU Group Policy will rewrite the registry setting. But if the TaskManager was accidently disabled or you need to control this item for a set of standalone boxes this is for you:
* Click Start
* Click Run
* Enter gpedit.msc in the Open box and click OK
* In the Group Policy settings window
o Select User Configuration
o Select Administrative Templates
o Select System
o Select Ctrl+Alt+Delete options
o Select Remove Task Manager
o Double-click the Remove Task Manager option
And as I mentioned above, since the policy is Remove Task Manager, by enabling the policy, you are disabling the Task Manager.
Got XP Home - use the registry edit.
5. Log out and log back into the GBPVR account.. Thats it!!!
Thoughts....
-- For some reason GBPVR will not load on a limited access account... need to research this as I would feel better if the GBPVR account was not Admin access.
-- Load the My Video plug-in to add security to your videos by assigning PIN numbers to files you donât want the kids to see.
-- Still to do... I want to add Firefox to GBPVR menu... but set it up to only allow access to site that I have added to the approved list of sites. ( I have researched this and there is a function to do this inside Firefox for locking the users to certain allowed domains)
-- Since GBPVR is loading as the shell... and Explore is not being loaded... you save on memory being used. Also there is no desktop icons, start menu, taskbar, or right click menu... this really locks the account to only allow GBPVR to run or programs that GBPVR has been configured to launch
Anyways... this has worked great for me and I thought I would share the info so others could benefit from it.
SCROFT