JSI Tip 4232. How can I use Group Policy to remove the Security tab on Windows 2000 Professional domain members?

To disable the Security tab:

01. In Active Directory Users and Computers, right-click the domain and press Properties.

02. On the Group Policy tab, select the Default Domain Policy.

03. Press New and rename the New Group Policy object to Remove Security Tab.

04. Using Up and Down, position Remove Security Tab immediately after Default Domain Policy.

05. Select Remove Security Tab and press Edit.

06. Navigate to Computer Configuration / Windows Settings / Security Settings / Registry.

07. Right-click Registry (in the left hand pane) and press Add Key.

08. Copy / Paste CLASSES_ROOTCLSID\{1F2E5C40-9550-11CE-99D2-00AA006E086C}

09. In the Database Security Editor, add the users and group that you want to remove the Security tab from.

10. For the user and group added in step 09, change permission to Deny Read.

11. Press OK and OK.

NOTE: To reverse these settings, reverse these settings and let them apply.

NOTE: See tip 2184 Windows 2000 Group Policy refresh.

NOTE: See tip 4231 How do I filter the scope of a Group Policy object?