This is the second post on the "Keyboard filter". In the first
post, in addition to introducing the topic, we dealt with how to
put the package "Keyboard Filter" in the Windows Embedded Standard
7 build, as well as service management and configuration management
in general. In this post we will go into more details on how to
"Configure predefined key combinations".
Configure predefined key combinations
In this list the most common key combinations are grouped in
order to simplify the configuration. These combinations can be
divided into:
· Accessibility keys
· Application keys
· Desktop and shell keys
· Modifier keys
· Security keys
· Windows management keys
NOTE: Windows Key is the one with the Windows logo
Accessibility :
|
Filter
|
Keys
|
Description
|
|
Block Mouse Keys Switching
|
Left Shift+Left Alt+NumLock
|
This key filter prevents the use of the keyboard to control
mouse or cursor movement and use.
|
|
Block High Contrast Switching
|
Left Shift+Left Alt+Print Screen
|
This key filter prevents the video resolution from changing the
Windows color scheme and controls.
|
|
Block Accessibility
|
Windows+U
|
This key filter disables access to the Ease of Access Center
that is used to start or configure the Magnifier, Narrator,
On-Screen Keyboard, or High Contrast features in Windows. However,
users can still run these features from Control Panel.
|
Application keys:
|
Filter
|
Keys
|
Description
|
|
Block Application Close
|
Alt+F4
|
This key filter prevents the current application or window from
closing. It may still be closed in other ways, depending on the
window, such as by using the OK or Cancel buttons; the Close
button; or drop-down menus.
|
|
Block Window Close
|
Ctrl+F4
|
This key filter blocks the ability to close tabs or documents
throughout an application.
|
|
Block System Help
|
Windows+F1
|
This key filter prevents the Windows Help documentation from
displaying.
|
Desktop and shell keys:
|
Filter
|
Keys
|
Description
|
|
Block Application Menus
|
Alt+Space
|
This key filter prevents users from accessing the
Minimize, Restore, and
Close menus in applications.
|
|
Block Start Menu
|
Ctrl+Esc
|
This key filter blocks access to the Start
menu. The unblocked action produces the same result as pressing the
Windows key, which must be blocked separately. (See Block
Windows Keys in the Modifier Keys table.)
|
|
Block Computer Find
|
Ctrl+Windows+F
|
This key filter prevents access to searching the network for
other computers and information.
|
|
Block System Properties
|
Windows+Break
|
This key filter prevents access to system information, for
example, computer name, workgroup, domain, or other system and
hardware settings.
|
|
Block Start Explorer
|
Windows+E
|
This key filter prevents access to the file system and to
drives, libraries, and other resources.
|
|
Block Find
|
Windows+F
|
This key filter prevents users from searching for system
information and files
|
|
Block Toggle Display
|
Windows+P
Windows+Shift+P
|
This key filter prevents users from changing the desktop to
other monitors and displays.
|
|
Block Run Dialog
|
Windows+R
|
This key filter prevents users from executing applications.
The ability of the user to remove the option from the Start menu
and from Task Manager should be disabled. To do this, open the
Local Group Policy Editor (gpedit.msc), and in the console tree,
browse to the following path: User
Configuration\Administrative Templates\Start Menu and
Taskbar. In the details pane, enable the Remove
Run menu from Start Menu policy setting.
|
Modifier keys:
|
Filter
|
Keys
|
Description
|
|
Block Alt Keys
|
Left Alt
Right Alt
|
This key filter disables all keyboard shortcuts that use the Alt
key. This filter may affect usability. This includes accessing
menus and focus between controls in dialog boxes. This filter also
blocks Ctrl+Alt+Del, which will no longer be available.
|
|
Block Ctrl Keys
|
Left Ctrl
Right Ctrl
|
This key filter disables all keyboard shortcuts that use the
Ctrl key, for example, Copy,
Paste, Save, and
Open. This filter may affect usability, such as
accessibility within dialog boxes. In addition, Ctrl+Alt+Del will
no longer be available.
|
|
Block Application Menu Key
|
Menu
|
This key filter prevents context-sensitive menus, for example,
the Cut, Copy, and
Paste menu, from appearing within
applications.
|
|
Block Shift Keys
|
Left Shift
Right Shift
|
This key filter disables all keyboard shortcuts that use the
Shift key. Users will not be able to change case in text. The
CapsLock key must be blocked separately.
|
|
Block Windows Keys
|
Left Windows
Right Windows
|
This key filter disables all keyboard shortcuts that use the
Windows key. When this key filter is enabled, the Windows key and
any other key that is pressed after it will not perform any
action.
|
Security keys:
|
Filter
|
Keys
|
Description
|
|
Block Secure Desktop
|
Ctrl+Alt+Del
|
This key filter prevents access to the Lock and Logon screens
from the desktop.
Note that Ctrl+Alt+Del filtering will not be enabled on the
Logon and Unlock screens. However, filtering resumes when the user
logs on.
|
|
Block Task Manager
|
Shift+Ctrl+Esc
|
This key filter prevents users from seeing applications and
services that are running, and from viewing other performance
information. Task Manager can still be run from the taskbar or from
a secure desktop. To remove this option, open the Local Group
Policy Editor (gpedit.msc), and in the console tree, browse through
the following path: User Configuration\ Administrative
Templates\ System\ Ctrl+Alt+Del Options. In the details
pane, enable the Remove Task Manager setting.
|
|
Block Lock Console
|
Windows+L
|
This key filter prevents access to suspend the current desktop
and show the logon screen.
The ability of the user to remove the option from the Start menu
should also be disabled. To do this, open the Local Group Policy
Editor (gpedit.msc), and in the console tree, browse through the
following path: User Configuration\ Administrative
Templates\ System\Ctrl+Alt+Del Options. In the details
pane, enable Remove Lock Computer.
|
Windows management keys:
|
Filter
|
Keys
|
Description
|
|
Block Task Switching
|
Alt+Tab
Shift+Alt+Tab
|
This key filter blocks the ability to move between
applications.
|
|
Block Window Switching
|
Ctrl+Tab
Shift+Ctrl+Tab
|
This key filter blocks the ability to move between tabs or
documents throughout an application.
|
|
Block Show Desktop
|
Windows+D
|
This key filter prevents minimizing or restoring all windows at
the same time.
|
|
Block minimizing active window
|
Windows+Down
|
This key filter prevents the current active window from
minimizing.
|
|
Block docking to the left
|
Windows+Left
|
This key filter prevents the current active window from docking
to the left edge of the screen.
|
|
Block Minimize All
|
Windows+M
|
This key filter prevents all applications from being minimized
and displaying the desktop.
|
|
Block docking to the right
|
Windows+Right
|
This key filter prevents the current active window from docking
to the right edge of the screen.
|
|
Block restoring active window when maximized
|
Windows+Shift+Down
|
This key filter prevents the current active window from changing
back to its original size from full-screen mode.
|
|
Block moving window to the left monitor
|
Windows+Shift+Left
|
This key filter prevents moving the current active window to the
left monitor on systems that have multiple monitors.
|
|
Block moving window to the right monitor
|
Windows+Shift+Right
|
This key filter prevents moving the current active window to the
right monitor on systems that have multiple monitors.
|
|
Block vertically maximizing active window
|
Windows+Shift+Up
|
This key filter prevents the current active window from docking
to the top and bottom edges of the screen.
|
|
Block Aero Flip3D Task Switching
|
Windows+Tab
Shift+Windows+Tab
|
This key filter prevents users from moving between applications
by using the Aero Flip 3D feature.
|
|
Block maximizing active window
|
Windows+Up
|
This key filter prevents the current active window from
maximizing to full-screen.
|
The last possible configuration of this category is very
interesting because it refers to the ability to disable all
keyboard filters when the user is "logged in" is an administrator.
When the administrator logs off, the filters are rehabilitated.
The filter is called " Block Filtering for Administrator".
Each "Predefined" filter can have one of these three values:
· Not configured (default status): the registry
is not changed;
· Enabled: policy setting is selected;
· Disabled: policy setting is not selected.
Here are the steps to configure:
· To launch gpedit.msc: click Start.
· In the search field in the Start menu, type gpedit.msc.
· When gpedit.msc appears under Programs in the search results,
click with the right-button on gpedit.msc and select "Run as
Amdinistrator" to launch the Local Group Policy Editor.
· In the left pane, locate Local Computer Policy. Move to
Computer Configuration, Administrative Templates, System, Keyboard
Filter.
· In the right pane, choose the filter you want configure and
select Edit with the mouse right-button.
· Select among Not configured, Enabled
or Disabled;
· Optionally insert a comment in the
Comment area;
· Click OK to confirm
_______________________________
In the second post of this article we will cover how to
"Configure and test predefined key combination". In the next post
we will deal with the use of Group Policy Editor to "Configure and
test custom key combination filters ".
These articles, divided into post, were written, revised and
translated into English as well as by me by other two colleagues of
mine (both Microsoft Certified Trainer for Windows Embedded
Standard 7): Gianni Rosa Gallina and Dorangela Daniele.
