[cross posted from superuser - I believe the question is also relevant here]
I'm trying to harden a windows 7 machine, including replacing the default login shell from explorer.exe to a custom application. This part works well.
However, I also want that the administrator will still be able to manage the machine, so I modified the user specific key:
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\shell
back to explorer.exe
- but when I log on I get a single windows file explorer window, and not the full desktop.
does any one know how to configure the normal desktop shell only to a specific user?
explorer
without the.exe
to work. (It's been awhile since I've messed with alternate shells.) On my Windows 7 machine, which hasn't had the shell changed, there is noshell
value at all.