-
Notifications
You must be signed in to change notification settings - Fork 7
/
3-RegistryPolicyFile_DisableDesktopChanges_Config.ps1
65 lines (45 loc) · 1.54 KB
/
3-RegistryPolicyFile_DisableDesktopChanges_Config.ps1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
<#PSScriptInfo
.VERSION 1.0.1
.GUID 041272b8-6ac6-4a23-90f9-428d2823502d
.AUTHOR DSC Community
.COMPANYNAME DSC Community
.COPYRIGHT DSC Community contributors. All rights reserved.
.TAGS DSCConfiguration
.LICENSEURI https://github.com/dsccommunity/GPRegistryPolicyDsc/blob/master/LICENSE
.PROJECTURI https://github.com/dsccommunity/GPRegistryPolicyDsc
.ICONURI https://dsccommunity.org/images/DSC_Logo_300p.png
.EXTERNALMODULEDEPENDENCIES
.REQUIREDSCRIPTS
.EXTERNALSCRIPTDEPENDENCIES
.RELEASENOTES
Updated author, copyright notice, and URLs.
.PRIVATEDATA 2016-Datacenter,2016-Datacenter-Server-Core
#>
#Requires -Module GPRegistryPolicyDsc
<#
.DESCRIPTION
Configuration that will enable the the policy the prohibits changes to the desktop only
for the Users group (Non-administrators) account.
#>
Configuration RegistryPolicyFile_DisableDesktopChanges_Config
{
Import-DscResource -ModuleName 'GPRegistryPolicyDsc'
node localhost
{
RegistryPolicyFile 'DisableDesktopChanges'
{
Key = 'Software\Microsoft\Windows\CurrentVersion\Policies\Explorer'
TargetType = 'Account'
ValueName = 'NoActiveDesktopChanges'
AccountName = 'Users'
ValueData = 1
ValueType = 'DWORD'
Ensure = 'Present'
}
RefreshRegistryPolicy 'RefreshPolicyAfterDisableDesktopChanges'
{
IsSingleInstance = 'Yes'
DependsOn = '[RegistryPolicyFile]DisableDesktopChanges'
}
}
}