Restrict Regular Users From Shutting Down Their Workstation?
Jul 25, 2012
I work in a domain environment administering a large number of workstations running Windows 7 enterprise. I want to restrict regular users from shutting down their PCs so that I can perform remote administrative tasks without walking out on the floor and ensuring all 300 + machines are actually turned on. I do not have rights to the domain controller so I cannot assign by group policy. I can use psexec or ntrights to remove shutdown options from explorer but users can still initiate the shutdown command via cmd and pressing the power button on the tower still invokes a shutdown. Note: I am not talking about a cold shutdown i.e holding the power button (I can't actually do anything about that). So is there a way (perhaps in the registry) to disable the shutdown command for all users except the local administrator? I'll need to do this to over 300 PCs so if it can be done via script of command line that would be best
I am using windows 7 32 bit . there are 90 users . we have linux server and run an web based application using IE. Internet is accessed through a modem which is connected to the same hub which uses the web based application.
so everyone is having an access to the internet. How do i restrict the internet facility to only to 3 or 4 users.
Does anyone know how to restrict users from installing software in windows xp mode, as far as I can see you cannot restrict users from installing software but interested to see if anyone has managed to do this
How can I restrict user from finance department to access share folder in server? just that particular department. What I know I can set in the permission 1by1. But the department has 100 user. Is there anyway to actually set to restrict this 100 user from accessing the share folder in the server?
I had users passing around a computer that ended up with a bunch of settings being screwed up which made me want to deny all regular domain users but not administrators. I did this as a local group policy on the computer under gpedit where i denied users and to my horrifying experience no users can log in, not even local admin.
I'm using windows 7 64x ultimateI sometimes play games on on it.my brother has been annoying me to play on it as wellI want to make a standard user for him while restricting what programs he can use.basically I want him to be able to play the games even if they may require administrator access and restrict his program access as well as folder access
I have an Intel Pro 1000 PT dual gigabit port NIC which I bought so that I can have one port plugged into the modem for my internet and the other plugged into the other network so that other computers can access files on my computer. The problem is that the data allowance on the internet connection for everyone else is very little so I don't want my computer to access the internet through the second connection. The primary reason for the file sharing is to stream movies over the network so I don't want to be enabling/disabling all the time. I have already tried setting a static IP and blocking it through the router on the secondary network but then I have all sorts of issues with applications in Windows (I'm using Windows 7 64) trying to access the net through the other connection, not getting through the router and timing out instead of trying the other network connection. Pointing the DNS to the static address on the secondary connection wont suffice either because it's torrents I'm trying to stop from downloading through the other connection not browsing. I've done a bunch of searching, what I'm trying to find out is if there is a way to disable internet but allow LAN traffic on a network connection. Hopefully with it being set in the software Windows will then always seek internet through the other connection.
The only workaround would be to set the group policy settings via regedit instead. To help, the links in the green info box at the top of the tutorial can help show you the registry locations for group policy settings. In addition, there may be a tutorial already written that will have a .reg file already created to make it easy to change as well. If you like, you could look through the tutorial index for any that may be created.I have several user accounts and I want to restrict the visibility of certain folders to certain user accounts. How do I do that ? And I have only Home Basic.I don't want to other users to see certain folders that exist in my HDD.
This is my first time here. I'm having a problem with my workstation service. The service won't start, so the services depending on workstation won't start neither. I get error 1068, but the network store interface service is started. I've tried to run sfc /scannow, but there are no problems there.I'm running win 7 64bit?
I can turn on a pc from another machine on the same home network, but can not from the Internet.I am doing this Wake-On-WAN experiment at home by using two machines each connected to the Internet through different ISP.The problem must be somewhere in the BIOS or the router setting for the machine to be turned on.I reviewed the BIOS and found the relevant option was enabled by default. As for the router(D-Link DIR 655), I set the portforwarding for the machine with a arbitrary port number(I picked 9) assigned. I did not see anything else relevant but I might have missed something.To send the magic packet, I am using depicus GUI. I also tried one at dslreports website.So far no luck yet. By using packet analysis utility of Wireshark, I could confirmed that the magic packet is hitting the router for the target PC but for some reason, the router does not forward the packet to the target PC's NIC. Instead, it broadcasts ARP to get the MACID of the NIC. Note that the magic packet contains the MAC ID and this is confirmed by intercepting this packet at the sending end PC.
I'm helping a Dental Office get their current workstations upgraded. All workstations are complete and ready to swap out the old hardware, except i am worried that when the users go to log back into the domain from the new pc's, they won't be able to.
The previous IT guy said they are local profiles, located on each individual PC and not on the server? I thought setting up a Domain was so people could log in from any computer on the network?
I am trying to allow only certain computers on my HomeNetwork to access a network drive. My router is a BT HomeHub 3 and thecomputers are all connected by ethernet cables, the computer I don't want tohave access is wireless. The network drive is connected to the network using aUSB on the HomeHub. I can access the network drive OK on all the computers, butI don't want the wireless computer to have access. I have tried and tried towork it out, nut the more I look the more confused I get. I'm sure there mustbe an easy way to this problem. Any help will stop me having sleepless nightsthinking of how to do it.
As an administrator, I have User Account Control set to "always notify" in Windows 7, but one of my kids (standard user) can still install Google Chrome. Shouldn't this require the administrator password? Also, UAC does not seem to limit a standard user's ability to Uninstall Programs. Is there a way to restrict that?
I was cleaning out some stuff in storage and ran across a Windows NT 4 Workstation CD (in original jacket). On a whim, I made an ISO of the CD and actually got it working under VirtualBox 4.0.6 running in Windows 7 x64 Ultimate w/SP1.
Windows NT 4 wouldn't recognize a 8GB virtual disk drive, so I made it 4GB with an assigned 1GB of ram and 32MB of video.
Total installation time was less than 15 minutes on a quad core w/8GB of ram.
The built in browser is Internet Explorer 2.0 It does require a valid CD-KEY to install NT Workstation 4, just in case you were wondering.
I mapped a drive from the server to my workstation. Then I created a shortcut to the exe file. When I launch it, it tells me the file cant be located. I have full admin rights.
Windows 7 Home Premium, I power on the system, windows comes up fine then a window titled "Workstation" comes up saying "Workstation stopped working", then windows keep popping up windows saying that it is collecting information on the problem with 2 buttons. One says "Send Information" and the other says "Cancel". There is no VMware workstation stuff on this system.
My Win 7 have 4 admin accounts and my account is one of them. I tried to protect all my folders and files stored under C:UsersMyAccount folder by selecting the "Share with.." => "Nobody" option, but the other admins can still access my folder. Also, I can access theirs too.
How to Restrict Folder Access to ONLY ONE Administrator under Win 7" if there are multip admin accounts on Win 7.
I just installed a new 64 gig SSD in my computer. I also have a 2T secondary hard drive.The SSD is not big enough to contain all the stuff that will eventually be in "My documents",i.e. under "users" so I need to move the users directory to my secondary hard drive but havewindows behave as it were in its original location.I did some research and found the following technique which seemed plausible (and several people said it worked for them)
1. Install windows normally. 2. After install, boot from installation disk. 3. Get into the command prompt by clicking "repair". 4. Use robocopy to copy c:users to d:users. The command line should be: robocopy c:users d:users /mir /xj /copyall 5. Verify all files copied successfully. 6. Delete c:users. Command line should be: rmdir /s /q c:users 7. Delete c:documents and settings. Command line should be: rmdir "c:documents and settings" 8. Create junction to new users directory. Command line should be: mklink /j c:users d:users 9. Create junction for the old "documents and settings". Command line should be: mkdir /j "c:documents and settings" d:users 10. Restart computer.
Note:When in recovery mode the disk drives end up with different drive letters than what the normally have.Consequently my SSD drive which is "C" became "E" and my hard drive which is "D" became "C". Confusing, but I adjusted the above commands to reflect this.All seemed to go well until I rebooted. The computer booted up fine, but when I entered my password to log in windows complained that it could not find my profile. Since I could not log in at all I was forced to re-install windows. Supposedly, this is doable and I NEED to do it asap as my SSD will not hold all the stuff that will eventually be in "users".
I am cleaning a laptop out and i created a brand new user name. I deleted the other 2 users using the control passwords2.
So the machine starts and i select the user. Process usage is very high and it says 50, but actual user shows about 9. I click show processes from all users and i find the culprit as well as 50 processes. I deleted the users so there shouldnt be that option.
Why is there more processes if this is the only user, why does it even have the option?
I will if I have to manually delete them, although I'm not sure what other files may still be around on my drive that are located in Users/All Users that are redundant any recommended programs that I could depend on for this task ?
I have installed active directory with Server 2003.I have created backup of active directory since a computer (XP) being on the domain.How to restore the backup to AD, since the computer (Xp)?
I have a window desktop 64 bit that I joined to a domain and migrated the profile from a workgroup to a domain using profwiz.exeEverything is fine except for the network drives which disappeared a few times.Whether I am logging off or the user just sits there, it wouild disappear and I have no idea why this is happening.
I am trying to deliberately set a different date in my guest os to that of my host os. My host is Windows 7 (x64), my guest is XP (SP3), and my virtualization software is VMware Workstation (7). In an attempt to set this up I have done the following -
1). Added a line to the VMX file 2). Booted into and modified the BIOS settings of the guest XP os (setting the date back in time to the 08/08/2008) - 3). Disabled the guest XP os internet time synchronization settings -
When I first boot into the XP guest I see the following date - However after about 2 - 5 seconds the date is restored to that on the Host - how to set a different guest os date / time.
I have Windows 7 Home Premium and I am usually the sole user and administrator on the computer. I want to create a Guest account or Standard User account with restricted access so that it cannot do the following:
(1) Access My Documents (not the standard folder but one I created)
(2) Access the internal backup drive E:
(3) Change system settings.
It all looks very complicated and I am not at all sure what to do. Is there any way to do the above with Home Premium?
Or if none of that is possible in Windows 7 Home Premium (64-bit) is there a program that allows me to prevent other users accessing specified folders/drives?
I need to restrict internet access to windows 7 administrator account. JUDGE ORDERED THIS. PROBATION OFFICER NEEDS TO BE SHOWN. I have a computer savvy kid. Is there any foolproof way to do this? I changed my security network key. Somehow he figured it out. It is becoming a "You can't limit my access" power stuggle even though the stakes are high. He needs his computer for homework and writing assignments or I would just take it away.
