SEBWIN-633: Attempt to completely remove ease of access option from Security Screen.

This commit is contained in:
Damian Büchel 2023-02-08 19:40:32 +01:00
parent e2e5d5ade8
commit baad469be6
2 changed files with 9 additions and 4 deletions

View file

@ -12,11 +12,16 @@ using SafeExamBrowser.Logging.Contracts;
namespace SafeExamBrowser.Lockdown.FeatureConfigurations.RegistryConfigurations.MachineHive namespace SafeExamBrowser.Lockdown.FeatureConfigurations.RegistryConfigurations.MachineHive
{ {
/// <summary>
/// Controls whether the ease of access option is available on the Security / Login Screen of the operating system. See also
/// https://learn.microsoft.com/en-us/windows-hardware/customize/desktop/unattend/microsoft-windows-embedded-embeddedlogon-brandingneutral.
/// </summary>
[Serializable] [Serializable]
internal class EaseOfAccessConfiguration : MachineHiveConfiguration internal class EaseOfAccessConfiguration : MachineHiveConfiguration
{ {
protected override IEnumerable<RegistryConfigurationItem> Items => new [] protected override IEnumerable<RegistryConfigurationItem> Items => new[]
{ {
new RegistryConfigurationItem(@"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Embedded\EmbeddedLogon", "BrandingNeutral", 8, 0),
new RegistryConfigurationItem(@"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Utilman.exe", "Debugger", "SebDummy.exe", "") new RegistryConfigurationItem(@"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Utilman.exe", "Debugger", "SebDummy.exe", "")
}; };

View file

@ -16,13 +16,13 @@ namespace SafeExamBrowser.Lockdown.FeatureConfigurations.RegistryConfigurations.
/// Specifies whether Remote Desktop connections are enabled. /// Specifies whether Remote Desktop connections are enabled.
/// ///
/// See https://docs.microsoft.com/en-us/windows-hardware/customize/desktop/unattend/microsoft-windows-terminalservices-localsessionmanager-fdenytsconnections: /// See https://docs.microsoft.com/en-us/windows-hardware/customize/desktop/unattend/microsoft-windows-terminalservices-localsessionmanager-fdenytsconnections:
/// 0 = Specifies that remote desktop connections are enabled. /// 0 = Specifies that remote desktop connections are enabled.
/// 1 = Specifies that remote desktop connections are denied. This is the default value. /// 1 = Specifies that remote desktop connections are denied. This is the default value.
/// </summary> /// </summary>
[Serializable] [Serializable]
internal class RemoteConnectionConfiguration : MachineHiveConfiguration internal class RemoteConnectionConfiguration : MachineHiveConfiguration
{ {
protected override IEnumerable<RegistryConfigurationItem> Items => new [] protected override IEnumerable<RegistryConfigurationItem> Items => new[]
{ {
new RegistryConfigurationItem(@"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server", "fDenyTSConnections", 1, 0) new RegistryConfigurationItem(@"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server", "fDenyTSConnections", 1, 0)
}; };