Create a GPO to remove "Give Access to option" from Windows Explorer Context Menu from all devices.

Md Rejaul Karim 1 Reputation point
2020-08-06T01:20:11.31+00:00

Hi Guys,
I am trying to remove the option "Give Access to option" from Windows Explorer Context Menu from all devices in our company.
I have found the below procedure to follow and its working when I setup in 1 device.
1.Press Windows Key + R then type regedit and hit Enter to open Registry Editor.

2.Navigate to the following registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions
3.Right-click on Shell Extension then select New > Key.

4.Name this newly created key as Blocked and hit Enter. If the Blocked key is already present then you can skip this step.
5.Now right-click on Blocked then select New > String Value.

6.Name this string as {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} and hit Enter.

I am trying to create a GPO which will do this for all the device in the company.

I have tried creating a GPO under Computer Configuration->Preferences->Registry->New->Registry Item
After this I am sort of stuck.

15945-image.png

I can do the Steps 1-3 but according to the steps 4. I need to create a new key name Blocked.
I don't see any option to create that.

I can do the steps 6.Name this string as {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} and hit Enter.
Can some one please help.

Regards

Windows for business | Windows Client for IT Pros | User experience | Other
{count} votes

1 answer

Sort by: Most helpful
  1. Anonymous
    2020-08-06T07:44:39.64+00:00

    Hello MdRejaulKarim-5428,

    Thank you for posting here.

    Based on the description, I did a test in my lab, and it works fine.

    We can try the steps below:
    1.Create an OU and put all devices we want into this OU.
    2.Create a GPO and link it to the OU above.
    3.Edit the GPO as below: navigate to Computer Configuration->Preferences->Windows Settings->Registry->New ->Registry Item

    Action: Update
    Hive: HKEY_LOCAL_MACHINE
    Key Path: SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked (we add "\Blocked")
    Value name
    Default: {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}
    Value type: REG_SZ
    16083-block1.png

    4.Run gpupdate /force on one device and check if the GPO takes effect.
    16020-bl2.png

    Hope the information is helpful. If anything is unclear, please feel free to let us know.

    Best Regards,
    Daisy Zhou


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.