I have this problem on a couple machines. I have created a user and put them in the local administrators group. They still get error messages when trying to install printers/browsers/programs and whe they try to run programs like IIS or device manager. The error says you need administrator rights to install or run the program. I have also disabled UAC to test that out. No luck.
View 5 Replies
A little background and info: I support a number of people who for one reason or another need to be able to do things a local admin can do like install programs and start services (or more accurately allow a program they're running to start a service). All users are in the local administrators group. The local admin account is enabled (and renamed) so that we as administrators have local access when the machine comes in for service. The machines are joined to a AD domain so that we can control a lot of the security via GPO. Everything worked fine in XP.
We are getting a few different "you do not have permission" errors. When the user tries to run OpenAFS (which starts a service) they get a "you do not have permission" error. There is no way around this error.
Also, when the users try to run Lotus Notes they get a "you do not have permission" error. When we go into compatibility mode and check the "run as administrator" (or just right click and "run as administrator) it works fine, but they have to click the elevated privileges. The program was installed while logged in as the user.
Again, all users are members of the local administrators group. When the local admin account logs in all these programs run fine. This behavior started in Vista and I chalked it up to "vista sucks". Windows 7 so far seems to be great, except that like in vista, members of the local administrators group are not really local administrators. How do I make them true local administrators?
I'm creating a local group policy to lock down a Windows 7 Pro Workstation for use in the Staff room.It's the first time I've used it, previously I've worked a bit with AD. but I've been following on line tutorials and using google and I'm nearly there with it.But I'm stuck on one thing. My approach has been to remove access to pretty much everything apart from IE, Firefox and Skype icons on the task bar. I've got the start menu empty apart from the shutdown button, which is what I want but at the top of the start menu is the users icon/picture thing and if i click on it it takes me to "user accounts". I can't for the life of me work out how to get rid of the picture or just stop this happening.
View 1 Replies View RelatedI have a base image, where I have configured the default profile using the administrator account. I created user ids, but did not log into these idsI used Local Group Policy to edit the policy of one non administrator ids I created. After sysprepping the computer, and successfully copying the profiles, the user is not configured with the group policy settings.Same deal as this guy Sysprep deletes Local Group Policy but his question was never answered.
View 2 Replies View Relateddo I copy dos programs to local disk C or to C on USER?
View 2 Replies View RelatedI use windows 7 home premium, having real player download difficulty. The actual message: As a Restricted User you do not have adequate Windows operating system rights to use this program to install software.
View 1 Replies View Relatedgpd is preventing me from doing most anything with my PC.Accidentally, II activated something as administrator and now I am limited as to what I can do I get windows saying blocked by group policy editor from performing this action. see administrator. I had admin privileges until reboot and now password has been changed,not by me.I am the only one with access to pc.
View 4 Replies View RelatedWe are implementing Windows 7 and Bitlocker as encryption. While this works brilliantly, I am now worried that our offsite engineers if they are given Local admin rights, can disable bitlocker. They need to install software onto there machines and this cannot be taken away from them. Problem is company policy also states that they are not allowed to disable the encryption, which is where my dilemma lies. I can lock down bitlocker through Grou Policy, but the offsite engineers are software developers so it wouldn't take them long to disable it if they do have local admins. Is there anyway at all I can give them access to install software without Local admins?
View 3 Replies View RelatedI'm being forced into an upgrade because my last machine was getting old and slow and was infested with viruses.
One of my guys is recommending setting up a non-admin user account for the every day use of the laptop so that any undetected Trojans don't have admin rights if they embed themselves. Do you guys think this is even worth it? Or is simply keeping UAC turned ON, will be enough with an admin account?
Laptop
Win 7 64 Home
HP Fingerprint reader
my login has suddenly added a secondary user with the same name as my account and when i click onto this other user it leads to my account this second user account also ahs the same name and seems to be a copy?
View 20 Replies View RelatedHow to Open the Local Group Policy Editor in Windows 7 ?
View 0 Replies View RelatedI added one user to Local Network Configuration Operators Group in Windows 7 Pro to change his laptop IP to connect to different VLANs at different locations, but still he doesn't have the privilege. He is also member of the Local Power Users Group
View 1 Replies View RelatedSo a new box recently built, when booted, defaults to the local administrator account.This is a Windows 7 machine for a Linux guru that doesn't want to be bothered pressing more buttons than is necessary, if you get my drift. So my question is, after pressing Ctrl+Alt+Del...how do I dictate to Windows that the preferred used is "HisDomainAccount" on our company domain, as opposed to the local admin account?
View 1 Replies View RelatedI recently locked down a PC's with LGP. It is heavily restricted for public use.One strange problem that has cropped up is the Flash player in Firefox.I didn't install the plug-in before I locked down the user account. Afterwards I realized I hadn�t installed it so I logged on to the Admin account and installed the plug. The player now works fine when logged in as Admin or as a User with full privileges but won�t play in my locked down user account, where I still get a message saying the plug-in is not installed.
View 1 Replies View RelatedHow to Add Local Group Policy Editor to Windows 7 Control Panel ?
View 0 Replies View RelatedI don't know how it happened. In Control Panel, I am the admin.In netplwiz, I am in Administrators. (I remember it as being HomeUsers, Administrators).
View 7 Replies View Relatedi have made a few backups of my 7 disk and i want to try to add my programs (eg Av firefox itunes ect) to install while windows installs so its all there when i log on? can i do that?
View 3 Replies View RelatedI want to alter the attachment manager in Local Group Policy Editor, but when I open it up, I am constantly greeted with a warning message that says One or more ActiveX control could not be displayed because either: 1) Your current security settings prohibit running ActiveX controls on this page, or 2) You have blocked a published of one of the controls.The odd thing is I am not trying to access anything online, this is merely a Windows policy editor access from my machine. I am wanting to change the attachment settings to stop warning messages from appearing when certain filetypes are unzipped.
View 1 Replies View Relatedhow can I enable Local Group Policy Editor Windows 7 HomePremium 64 bit
View 1 Replies View RelatedDC: Win Server 2003
Laptops: Win7 Pro
When joining a set of laptops to the domain it prompts for domain admin credentials and appears to be successful, but gives an error of 'Changing the Primary Domain DNS name of this computer to " " failed. The name will remain domain.local The error was: The RPC Server is unavailable.
When attempting to add Domain Users to the local administrators group: Windows cannot process the object with the name "domain users" because of the following error: The RPC server is unavailable.
This happens even when wired on the network. I have tried uncommenting the localhost line in HOSTS, and manually adding the DNS server (which is also the DC).
My step son downloaded a bunch of virus' which hosed my computer. I just finished realoading windows and all my software and now I'm going through and removing things from his start menu so he only has access to limited programs, he's 9 and he doesn't know to go into the c:/program files to get anything. I was in his standard user account moving stuff so it would only show up on my login. So when it came up and asked for an administrator password I typed in my password and did what I had to do. The only problem is now he still has access to those things that I authorized. I can now go into his account and access my documents. I would think you would have to put in the administrator password every time but obviously that's not the case. How do I reset that so he no longer has access to that stuff?
View 2 Replies View RelatedI was kind of thrown into the issue of allowing a user to have admin rights on their own system, eg., download various programs like Firefox, Adobe stuff, and before I go in to muddle things up, I must ask how to do this.....
View 1 Replies View RelatedRun-as local admin doesn't quite work. I also started the initialization process then gave the drive back to the user to finish formatting in NTFS. However, the HD is 2 tb and he only got to 10 mb before Windows 7 quits and shoots failed error.
View 9 Replies View RelatedHow can i close the drive "g" in local group policy from "prevent access to drives ..."? The drive "G" isn`t in the list?
View 10 Replies View RelatedMy user account has Admin priviledge but I can not search anything in my own folder...
Desktop>Libraries>Documents
Although I can search the same folder if I open up to the path...
Computer>Local Disk C>users>Ownerc>My Documents>
I tried making a whole new user with Admin authority. That new one had the same problem.
When I start Windows, programs that need administrator rights don't start as they did before. Before I describe the problem I'm having I would like to state that I searched and found similar problems all over the web, but not any solutions that worked for me. Now let's get on with the problem.The situation is as follows: programs that need admin rights and which I set to run at log on (like PeerBlock and TopWinPrio) don't start automatically anymore. I don't get a UAC message, I get nothing, they just don't launch.A few days ago everything worked fine. Since then I've run CCleaner and Gamebooster 3.5b. I did clean the registry with CCleaner but used the backup of the registry CCleaner made after I noticed this behavior (so I think the registry clean with CCleaner could not be the issue). I've also used the 'normal clean' function of CCleaner, maybe this caused the problems?
I think the problems have something to do with messed up admin rights on my account. The programs startup fine when I disable UAC, but I'd rather not do thatAlso, when I log onto the administrator account, the programs startup fine. I can start the programs manually after I'm logged in, but I'd rather have them startup automatically.I've tried the following to solve it:- sfc / scannow command - did not solve it- check if my account has admin rights - as far as I can see this is the case- look for restore points - this is stupid, I know, but it seems I have deleted them with either Tuneup or CCleaner
I have a software which reguires the user profile to have rights to change system time. Software is run as a non-admin user profile so software's installer should give the proper rights. Installer is run as admin. Can this be done and if it can, how it is done?
View 4 Replies View RelatedI'm reinstalling Windows 7 onto my 32GB OCZ SSD boot drive. In addition to that drive, I have a 1TB media drive and a 1TB drive that holds my user files as well as all my programs. I can't seem to figure out how to ensure that all the short cuts for the programs and data for the user file will run smoothly on the fresh install. Is there anything I should do before nuking the SSD and anything additional that I should do after the install or just treat it like a fresh SSD/HDD install but use the already existing user data? tl/dr: Reinstall windows on boot drive (SSD) and retain users folder/program files on separate HDD? edit: creating a clone image and using that won't work here, the actual OS files are bad
View 3 Replies View RelatedI'm running windows 7 I need to know why I have an "Account Unknown" listed under group or user names.his was found when I saw an unusual shortcut for Safari on my desktop.It came up when I selected security tab.Path : C:UsersPublicDesktopSafari.Ink My PC is set up for Home not public as well
View 1 Replies View RelatedI am setting up multiple machines to run Windows 7 on my home network. I would like the users to have the same profile settings regardless of the machine they log into. Can user profiles be synced between machines within the same homegroup?If not, during the setup of the user, can I copy user preferences/profile settings so when they log in for the first time they don't have to reset everything?
View 4 Replies View RelatedIn my server 2008 r2, i have applied group policy setting, un fortunately i applied local adminstrators account disabled thorugh group polcy, at the same time my domain controller also disabled & all local admin also disabled,i cant logon to the domain admin account in my server because it is disabled, pl give me a solution, how to enable my domain admin (OR) how to reset group policy (OR) how to reset the group policy which was applied through this server in user end.
View 3 Replies View Related
