Configuring a user with no shell.

[gradiov]

Hi everyone. I have a couple of questions in regards to the windows registry settings. Hopefully, someone here will be able to solve my puzzle :-) Objectives: I have a workstation running Windows XP SP1. The workstation is a part of the domain and users authenticate against AD. I need to configure (for whatever reason) 1 local account to startup with no shell. My Actions: 1) In order to configure a single account to run with no shell I make the following changes to the system registry: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell = "explorer.exe" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\system.ini\boot\shell="USR:Software\Microsoft\Windows NT\CurrentVersion\Winlogon" HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell = "" HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\PersistBrowsers = 0 Results: The registry changes above indeed made that particular user accout start up with no shell, however during initial startup explorer window (just a file browser) still comes up. My question is how to get read of this window. I did check Startup Folder, RunOnce, Run, RunOnce and RunOnceEx - nothing that could start explorer. Where else should I check? Thanks for going through the entire post! :-) I hope I was able to make myself clear, and I am really looking forward to getting some expert advice here. Thanks a lot.

[Lost User]

Try to use the group policies and find and configure this key Don't run specific windows application.