Many people are in the process or have migrated already to windows 7 settings and policies that were developped for previous operating systems sometimes won’t work anymore or will not cover new features of the operating system.

One of those is Libraries.

Once you want to hide some of those (Network for instance), you will see that it’s not all that simple:

The previous way of tweaking this (on TS/Citrix environment usually) was to change registry settings. If you try to do this on Win7/Win2008R2, you will notice that the default permissions do not allow you to do it. While it is ‘easy’ enough for a sys admin to go into the registry permissions and add the necessary rights, doing it in an enterprise environment for several hundred computers…

The standard way to do this would be to use Setacl.exe to take ownership of the keys then add the permissions, and finally change the key.

You can get Setacl.exe here :

Example to change owner of a key to administrators:

setacl -on “hklm\SOFTWARE\Classes\CLSID\{F02C1A0D-B
E21-4350-88B0-7367FC96EF3C}\ShellFolder” -ot reg -actn setowner -ownr “n:Adminis

When looking for a script/tool to do this, i found a very nice tool called WENPCFG from Andreas Fleischmann. As it took me quite a while to find it, i decided to post the link here: (The blog post is in German, but the tool itself is in English)

The command WENPCFG /HideLibraries /HideNetwork would hide those two libraries from the users (can’t be more simple)

I do not have the source code of those tools so take precautions before running them in your environment. But i can say those tools are working extremely well and make the changes very easy for the administrator.