I had users passing around a computer that ended up with a bunch of settings being screwed up which made me want to deny all regular domain users but not administrators. I did this as a local group policy on the computer under gpedit where i denied users and to my horrifying experience no users can log in, not even local admin.
View 2 Replies
It has been a month now since installing Windows 7. Everything appears to be fine except this "access denied" errors on some of the files for certain users. I finally managed to turn on the hidden "administrator" feature in command prompt to unlock some. Aside from the design of users potentially "locking" themselves out of their own documents ( because of they are not logged in as an Admin, even though they have all admin privileges. I was going around in circles giving each other permission when the real admin was never enabled.
Now its effecting the programs and installation. For example, if Daddy logs on and try to install a program that requires a command prompt, I can't because I did not log in as an Admin. Now we have 3 separate users, each with their own documents, programs, and desktop settings.I want to delete all users and combine all the docs, programs, etc. Into one easy access and one user. No passwords, nothing. So as soon the computer boots up windows, it should ready to go, everything.
I work in a domain environment administering a large number of workstations running Windows 7 enterprise. I want to restrict regular users from shutting down their PCs so that I can perform remote administrative tasks without walking out on the floor and ensuring all 300 + machines are actually turned on. I do not have rights to the domain controller so I cannot assign by group policy. I can use psexec or ntrights to remove shutdown options from explorer but users can still initiate the shutdown command via cmd and pressing the power button on the tower still invokes a shutdown. Note: I am not talking about a cold shutdown i.e holding the power button (I can't actually do anything about that). So is there a way (perhaps in the registry) to disable the shutdown command for all users except the local administrator? I'll need to do this to over 300 PCs so if it can be done via script of command line that would be best
View 2 Replies View RelatedI have a free domain from dyndns. I am going to run a small website so, I installed apache server for windows. I need to redirect my users from my main page (my domain) to another page in my web space.
View 2 Replies View Relatedi am looking for a way to create temporary profiles for people who log into our loaner computers on our domain. When i search on google all that comes up is how to fix the temp user error
View 4 Replies View RelatedI have an issue with Sharing a Folder on a Windows SBS 2011 Domain. On my Windows 7 Client Computer I want to Share one particular folder, but not with "Everybody". Instead I just want to share the Folder with one colleague Toward this end I enabled Sharing on the folder and gave Brendon permission to access the share.
View 1 Replies View RelatedI work in and oversee the computer network of a small architecture office. We only have 6 or 7 users right now, and about 12-14 active machines throughout the office. All machines connect through our office domain to our server box running Windows Server 2003 x86. Most production machines are now running Windows 7 x64, but there are a few XP x86 machines still left in the office. Everyone logs onto their machine using their username and password, which is set up in Active Directory Users and Computers on the server. Each username has a login script associated with it that maps various shared folders on the server as network drives on the workstations.
Right now, each user's workstation has that username set up as an Administrator account on that machine. I know that's not recommended, but it's been okay so far. However as time passes, I'm getting more and more concerned about network and computer security.
I'd like to know if there's a way to set up user accounts such that it won't ask for an Admin user name and password every time a program needs an update, but also doesn't allow them full access like Admins have, i.e. deleting software and such.
The issue is that I don't want to have to run around and enter an admin user name and password on the Windows 7 machines every time some software update appears or the user needs to install some software on a machine. We're a small office and don't rely on any actual IT department. I have many other responsibilities in the architecture field (working drawing production, project management, etc) and don't have time to always do that, especially when I'm out of the office on a jobsite, etc.
DC: Win Server 2003
Laptops: Win7 Pro
When joining a set of laptops to the domain it prompts for domain admin credentials and appears to be successful, but gives an error of 'Changing the Primary Domain DNS name of this computer to " " failed. The name will remain domain.local The error was: The RPC Server is unavailable.
When attempting to add Domain Users to the local administrators group: Windows cannot process the object with the name "domain users" because of the following error: The RPC server is unavailable.
This happens even when wired on the network. I have tried uncommenting the localhost line in HOSTS, and manually adding the DNS server (which is also the DC).
I need to replace a W2K computer on a domain with a Windows 7 computer(laptop), but I want to keep the same computer name.I need the ip, username, profile to stay the same. Can I delete the computer from the domain and name the new computer that name I deleted and still keep the users profile on the new machine, as if it was the old one?
View 2 Replies View RelatedI have done this all before. In addition to
HKLMSystemCCSServicesLanmanWorkstationParameters
DWORD DomainCompatibilityMode = 1
DWORD DNSNameResolutionRequired = 0
I am using Samba 3.5.8 and I am trying to join a Windows 7 64Bit laptop to my domain.
HP Pavillion dv6
Intel core i5 CPU M 520 @ 2.40GHz 2.40Ghz
4.00 GB RAM
However when I try join the domain i get the following message:"The following error occurred attempting to join the domain "MYDOMAIN"The specified domain either does not exist or could not be contacted.If I do a nslookup it resolves the domain controller, as well if i watch the traffic I can only see UDP traffic on that IP, however i can still browse the web from it?
How do I change the permissions for the administrator account to Full control so that I do not get the "access is denied" message when trying to perform certain functions?
View 3 Replies View RelatedWhenever I try to change something in program files, windows doesn't allow me, says that: You require permission from administrators to make changes to this file. But I am the administrator, I have checked alot of times.
View 9 Replies View RelatedI have this problem on a couple machines. I have created a user and put them in the local administrators group. They still get error messages when trying to install printers/browsers/programs and whe they try to run programs like IIS or device manager. The error says you need administrator rights to install or run the program. I have also disabled UAC to test that out. No luck.
View 5 Replies View RelatedI have two domains, company.com and [URL] i need to be able to access the wifi that is on [URL] from a laptop that is joined to [URL]? im running win 7 pro 32 bit with the following security on the [URL] domain wifi
Security Type: WPA2-Enterprise
Encryption Type: AES
PEAP
the real deal is that i just need [URL] to share the wifi with company.com as under [URL] domain there are other attributes that need to be accessed?
I am trying to deny access to a particular .exe using applocker. I have created a rule and the default rules, and made sure the appIDSvc service is running. My rule is not being enforced. The application runs normally. If I check the event log I can see a bunch of warnings stating appidsvc.dll:AppLocker component not available on this SKU. Not sure if this is a symptom or something else.
View 3 Replies View RelatedWhile attempting to set up a new computer on our network I seem to have lost access to many documents and lost permission to many folders. While setting up a new computer we began playing with what programs and documents the new computer could access. (The new machine is to be used for clients, and for internet/printing privileges) we did not want the computer to access anything on the network except the printer.
We did the above by right clicking on the public folders where we kept our documents, opening the security tab and restricting the permissions. We would then deny the new computer access via the ownership tab. This seemed to work as the new computer on the network had no access to our files but could still print to the printer on the shared network. I wasn't on the computer at the time, (my lackey status didn't permit as such) and I think somehow the other person managed remove our access to the programs/documents.
I think they did this by changing the admin privileges to deny for all. I am guessing that's what happened because now when I try and take ownership of the files I am unable to open them. It will let me take ownership of the files but then still says me access is denied when I try to open any of the selected files of documents. (does not prompt for password). In short, Is there a way to reestablish my admin privileges after what appears to be simple mistake on which account was selected?
I would like to block printing on a particular machine. Is this possible? I just want a certain machine to simply not be able to print.
View 2 Replies View RelatedAnybody know how to deny users access to the Manage Wireless Networks link from the Network and Sharing center?
View 5 Replies View RelatedShe was saying that the person who's computer I was replacing uses there shared HP Deskjet 6540 to print most documents when really it should only be used to print one type: 'lables.docx.'
So this got me wondering whether it were possible or not to deny printing rights to the 6540 from applications such as Outlook - whilst keeping them in word and program 'x' but also allowing Outlook to print to other printers in the office.
Now I think even before asking that this is probably not possible but I need to know either way.
Somehow a drive on one of my work computers got the security permissions for "everyone" set to deny. I need some type of work around to reset the permissions or a way to recover the data from the drive so I can format it. The bottom line is I need the data, so whatever I can do to make that happen I will do.
View 5 Replies View Relatedhow to deny internet access to all my programs by default? I mean that internet access is completely blocked to my existing programs, files, etc. and to all future programs that I might install or files that may be created.
And ONLY those Programs and Files have access to the internet that I allow and give permission to. P.S. I have Kaspersky Internet Security 2012, but can't seem to figure out the appropriate settings..
I've got a folder shared to specific user on my Windows 7 laptop.When i try to access that folder over lan, from my Vista laptop, it doesn't ask me for user&pass, but just gives "Access denied" error message.If it's set as shared to everyone, then i can access it just fine. But i want it to be accessible only after password protection over lan. Both laptops are set to "WORKGROUP" and here are the network settings for the windows 7 one
Network Discovery: ON
File and printer sharing: ON
Public Folder Sharing: OFF
File sharing connections: Enable 40 and 56 bit encryption as well
Password protection sharing: ON
HomeGroup connections: Use user accounts and passwrods to connect to other computers
How to Allow or Deny Access of Task Manager for a Specific User ?
View 0 Replies View RelatedI am looking for a way to prevent writing to all removable devices. I have found the setting in group policy and enabled it. However, admin credentials are requested and if entered correctly, the user can write to the external drive. I want to configure this to allow writing to a removable device ONLY if the user is in the correct security group or a member of the domain administrators. In other words, this policy would apply to all users and be denied to the security group. We are still in a 2003 domain, although most of our DCs are now Windows 2008 R2. This policy would apply only to users logging in to our Windows 7 machines.
View 5 Replies View RelatedI just installed a new 64 gig SSD in my computer. I also have a 2T secondary hard drive.The SSD is not big enough to contain all the stuff that will eventually be in "My documents",i.e. under "users" so I need to move the users directory to my secondary hard drive but havewindows behave as it were in its original location.I did some research and found the following technique which seemed plausible (and several people said it worked for them)
1. Install windows normally.
2. After install, boot from installation disk.
3. Get into the command prompt by clicking "repair".
4. Use robocopy to copy c:users to d:users. The command line should be: robocopy c:users d:users /mir /xj /copyall
5. Verify all files copied successfully.
6. Delete c:users. Command line should be: rmdir /s /q c:users
7. Delete c:documents and settings. Command line should be: rmdir "c:documents and settings"
8. Create junction to new users directory. Command line should be: mklink /j c:users d:users
9. Create junction for the old "documents and settings". Command line should be: mkdir /j "c:documents and settings" d:users
10. Restart computer.
Note:When in recovery mode the disk drives end up with different drive letters than what the normally have.Consequently my SSD drive which is "C" became "E" and my hard drive which is "D" became "C". Confusing, but I adjusted the above commands to reflect this.All seemed to go well until I rebooted. The computer booted up fine, but when I entered my password to log in windows complained that it could not find my profile. Since I could not log in at all I was forced to re-install windows. Supposedly, this is doable and I NEED to do it asap as my SSD will not hold all the stuff that will eventually be in "users".
I am cleaning a laptop out and i created a brand new user name. I deleted the other 2 users using the control passwords2.
So the machine starts and i select the user. Process usage is very high and it says 50, but actual user shows about 9. I click show processes from all users and i find the culprit as well as 50 processes. I deleted the users so there shouldnt be that option.
Why is there more processes if this is the only user, why does it even have the option?
What are the all users and default users folders? Do I need them or can I delete them if I am the only user.
View 2 Replies View RelatedI will if I have to manually delete them, although I'm not sure what other files may still be around on my drive that are located in Users/All Users that are redundant any recommended programs that I could depend on for this task ?
View 2 Replies View RelatedMy father replaced his Windows 98 machine with a new computer running Windows 7.He's currently on 32-bit ultimate, but we could change versions if needed.He's really hoping there's some way to force Windows 7 into a single user mode, primarily so C:usersAll Users, Default User, Public, and his own user are merged into one. It's absolutely driving him nuts the way it is.
View 2 Replies View RelatedI have a new installation on a computer of Windows 7. I want to create a Password Disk. The Administrators Password is currently "Blank".When I go to Control Panel, User Accounts - I do not find any option on the left for "Creating a password disk".I have another user account that has Administrator rights and has a password. I do not find any options for that user as well?
View 9 Replies View RelatedDoes Anyone Know A Way To Put A Regular PCI Card, Such as a NIC, in a PCI x16 Slot?
View 4 Replies View Related
