Taggart :donor: on Nostr: I think I have a nice compromise #ClickFix ...fix for those places that just can't ...
I think I have a nice compromise #ClickFix ...fix for those places that just can't live without some Explorer niceties.
There is an alternative to the "Disable Windows shortcuts" GPO, which not only disables Win+ shortcuts, but also things like using UNC paths in the Explorer address bar.
Of course, Geoff Chappell lights the way.
I believe that GPO applies the REST_NORUN reg key and not REST_NOWINKEYS policies—despite the name.
If I apply the REST_NORUN reg setting directly, I get the same behavior as the GPO. The popup pictured here appears.
But if I instead set the REST_NOWINKEYS dialog, the Win+R shortcut is disabled, but other stuff (like UNC paths in explorer) still works! Now, this doesn't remove the Run command from the start menu, but it is at least a safety. Oh and one more thing: because that shortcut is now unregistered, you can register it yourself for something like a lil daemon that pops a message box saying Hey did a website tell you to do this? Don't!
You can try both settings.
REST_NORUN: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun
REST_NOWINKEYS: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoWinKeys
Published at
2025-05-13 23:15:40Event JSON
{
"id": "41f015756b803b975c88ce9fced9d7ea6ad0e250ae819a6b157d4caf3d1b7e43",
"pubkey": "3ba412ac4b14c4b37cd6ed16b9d262ad4ffefb05c5b6c6b3e15e381471b1221a",
"created_at": 1747178140,
"kind": 1,
"tags": [
[
"t",
"clickfix"
],
[
"imeta",
"url https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/503/066/478/941/383/original/407a4b33d076121c.png",
"m image/png",
"dim 577x156",
"blurhash UjPjGcs:Mxxa%Mayaxf600kCkCWVxukCbHkC"
],
[
"proxy",
"https://infosec.exchange/users/mttaggart/statuses/114503066592856224",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.mostr.pub"
]
],
"content": "I think I have a nice compromise #ClickFix ...fix for those places that just can't live without some Explorer niceties. \n\nThere is an alternative to the \"Disable Windows shortcuts\" GPO, which not only disables Win+ shortcuts, but also things like using UNC paths in the Explorer address bar. \n\nOf course, Geoff Chappell lights the way.\n\nI believe that GPO applies the REST_NORUN reg key and not REST_NOWINKEYS policies—despite the name.\n\nIf I apply the REST_NORUN reg setting directly, I get the same behavior as the GPO. The popup pictured here appears.\n\nBut if I instead set the REST_NOWINKEYS dialog, the Win+R shortcut is disabled, but other stuff (like UNC paths in explorer) still works! Now, this doesn't remove the Run command from the start menu, but it is at least a safety. Oh and one more thing: because that shortcut is now unregistered, you can register it yourself for something like a lil daemon that pops a message box saying Hey did a website tell you to do this? Don't!\n\nYou can try both settings.\n\nREST_NORUN: HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoRun\n\nREST_NOWINKEYS: HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoWinKeys\n\nhttps://media.infosec.exchange/infosec.exchange/media_attachments/files/114/503/066/478/941/383/original/407a4b33d076121c.png",
"sig": "d1856ae4c4c8cae2c611e068fafc093627c15b4480be23fbaa8cf5f0abffcc273857230a402a9aef3b0223b9680ae3dc333af083cdfccdbf400b481d88d6007b"
}