Use Local Group Policy To Prevent Access To User Account Setting?
Feb 5, 2012
I'm creating a local group policy to lock down a Windows 7 Pro Workstation for use in the Staff room.It's the first time I've used it, previously I've worked a bit with AD. but I've been following on line tutorials and using google and I'm nearly there with it.But I'm stuck on one thing. My approach has been to remove access to pretty much everything apart from IE, Firefox and Skype icons on the task bar. I've got the start menu empty apart from the shutdown button, which is what I want but at the top of the start menu is the users icon/picture thing and if i click on it it takes me to "user accounts". I can't for the life of me work out how to get rid of the picture or just stop this happening.
Windows 7 Pro 32 bit on a domain?I have a group policy set on an OU named LAPTOPS. The policy gets applied, however the User ConfigWindows SettingScriptsLogon DOES NOT. When you run the GPRESULTS on the laptop, I see the policy settings being applied EXCEPT for the LOGON script. Its not there. I dont see any errors and cant figure out why Windows would ignore this one setting in the policy but apply the rest. I've tried deleting and recreating the policy but that does not work.
I have recently been granted admin rights on my work computer.While the computer was locked down, the Aero visual effects were set to "adjust for best performance".I can change it to "adjust for best appearance" and the Aero effects appear - until I reboot the computer. After the reboot, the checkbox is still set to "adjust for best appearance" however, the effects are disabled. I have to change the setting, change it back to best appearance and hit OK. Then everything works again.The friend in IT who granted the admin rights told me that this is due to the group policy our company has set up - and that there is nothing he can do about it.I have checked gpedit and regedit but could not find any relevant entries.Do you have any idea how I could automagically adjust the settings back to best appearance after every reboot? I was thinking that if I cannot turn of the group policy myself, then maybe I could write some sort of script that changes to appearance settings for me (instead of me having to do it manually every time).
I recently locked down a PC's with LGP. It is heavily restricted for public use.One strange problem that has cropped up is the Flash player in Firefox.I didn't install the plug-in before I locked down the user account. Afterwards I realized I hadn�t installed it so I logged on to the Admin account and installed the plug. The player now works fine when logged in as Admin or as a User with full privileges but won�t play in my locked down user account, where I still get a message saying the plug-in is not installed.
I want to alter the attachment manager in Local Group Policy Editor, but when I open it up, I am constantly greeted with a warning message that says One or more ActiveX control could not be displayed because either: 1) Your current security settings prohibit running ActiveX controls on this page, or 2) You have blocked a published of one of the controls.The odd thing is I am not trying to access anything online, this is merely a Windows policy editor access from my machine. I am wanting to change the attachment settings to stop warning messages from appearing when certain filetypes are unzipped.
In my server 2008 r2, i have applied group policy setting, un fortunately i applied local adminstrators account disabled thorugh group polcy, at the same time my domain controller also disabled & all local admin also disabled,i cant logon to the domain admin account in my server because it is disabled, pl give me a solution, how to enable my domain admin (OR) how to reset group policy (OR) how to reset the group policy which was applied through this server in user end.
One of my user accounts have been getting the error above after a shutdown.I tried system restore but it did not work.I have tried disabling non-windows service on startup and that didn't work.
I am looking for a way to prevent writing to all removable devices. I have found the setting in group policy and enabled it. However, admin credentials are requested and if entered correctly, the user can write to the external drive. I want to configure this to allow writing to a removable device ONLY if the user is in the correct security group or a member of the domain administrators. In other words, this policy would apply to all users and be denied to the security group. We are still in a 2003 domain, although most of our DCs are now Windows 2008 R2. This policy would apply only to users logging in to our Windows 7 machines.
i am using win 7 ultimate n.in my computer i am having two user.one is my account and another account is my brother's one.how to prevent my brother from accessing my local disk.eg:my local disk is d:.how to prevent my bro from accessing
I have been refused acccess to my laptop, message reads, The Group Policy Client Service failed the logon. Access denied. I am entering the correct password but i cannot log on
i start my pc up (from being off) and get logged into a temp user profile. It tells me that i cannot acess my user profile and all information will be deleted on logging out. I've looked online for a soloution but none work for me ,I really dont know how to resolve this problem,I have limited knowledge and computer skills. i really dont want to scrap this drive and start over.
I have a base image, where I have configured the default profile using the administrator account. I created user ids, but did not log into these idsI used Local Group Policy to edit the policy of one non administrator ids I created. After sysprepping the computer, and successfully copying the profiles, the user is not configured with the group policy settings.Same deal as this guy Sysprep deletes Local Group Policy but his question was never answered.
I have this problem on a couple machines. I have created a user and put them in the local administrators group. They still get error messages when trying to install printers/browsers/programs and whe they try to run programs like IIS or device manager. The error says you need administrator rights to install or run the program. I have also disabled UAC to test that out. No luck.
This laptop is my second computer I've had with Windows 7 Home Premium. I have one user as the Administrator, which is me, and a second user which is my wife. Her account is a Standard Account.On my previous computer I had the exact same setup for the two accounts. I like to use a different (higher) resolution then she does. She doesn't like the smaller icons, windows, lettering, etc. We could log in on her side and set her resolution, etc. to whatever and it worked okay. However, on this new computer when logged in on her account when we change the resolution it also changes my user side to the same as hers. When I log into my account and change mine to what I want it changes hers.On the old computer it worked the way it suppose to, each account could be changed and it would stay that way without effecting the other.
I'm getting pretty good at reinstalling Windows 7 (Clean) - However I do have a question: What is the best way to set myself up as the Administrator so I don't constantly have to work around those pesky "You need administrator privileges to do xxx". I would think that even with setting my default user account as an Administrator, there would be a way to really be an Administrator.
I have turned on the Guest account, and I need to set program and folder access permissions. I have google'ed the way to set file and folder permissions, but I am having some difficulty with some of the things that I need.
For instance I need to: -deny access (just deny listing the directory structure; can read & write so apps can work) to C:* , Control Panel, and a few other locations
If I try to deny dir listing for Guest on root C: , it gives me a couple warnings and will not set permissions for "program files, program files x86, windows" folders even though I am the admin. After those initial issues, it continues to set the permissions for all the rest of the files. If I log into the guest now, goto Computer and double click on C: , it now says "access denied", which is good but if I type in the address bar up top "C:users", it will goto that location; not display the access denied message. I am using the Home Premium edition so I cannot use the Group Policy Editor..
I have just reinstalled my computer, when checking Properties>Security on one of the files on the desktop there are a user/group account I have never seen before. Its called "Interactive".
I have a windows 7(SP1) peer-peer netwrk at my work place.In order to block usb write access for users i have created three accountssuperAdmin : Administrator account with no restrictions localAdmin : Administrator account with removeable disk deny write access policy enabled user :standard account .
I am having troubl with changeing anything in my User Account Controls. Every time I try to access the tab I just get an error message saying that "Windows cannot find" followed by a long line of numbers. I am a little concerned as I noticed, according to Belarc Advisor, that I suddenly have a mysterious user on my windows called "UpdatusUser" and has apparently logged on 399 times!
I have logged in as administrator and I am trying to start up the 'Group Policy Editor' using gpedit.msc but Windows 7 can't find it. Is this something that has to be installed or comes inbuilt with Windows 7?
I have logged in as administrator and I am trying to start up the 'Group Policy Editor' using gpedit.msc but Windows 7 can't find it. Is this something that has to be installed or comes inbuilt with Windows 7?
I've got a comp that used to be connected to a domain where it was locked down pretty tightly. I've got full admin rights on it, but it's still denying me the right to change settings in McAfee (and other programs like Windows Firewall, etc).I cleared out all group policies on the computer, but apparently not.Right now McAfee is the last thing I have to try to get a program working (I think it's stopping it from running), but I can't find any way to shut it down, prevent it from working, or enable specific programs, every single setting is grayed out.So, short of going into safe mode and deleting every McAfee file I can find, do you have any idea how I can completely wipe out all old security settings on this machine, group policies, etc?
I know that Win7 Home Premium does not have the group policy management console.As i only connect directly to my modem and do not file share or edit the computer remotely etc. From a security point of view, which policies would you recommend to change from their default state?,I'm aware that some if not all policies can be edited in regedit, are the registry values easy enough to find or should i just bite the bullet and upgrade my Windows 7 to Win7 Ultimate.
How did it get activated? Do I need it? If not, how do I get rid of it? I have never heard of it before.This is a single user computer. No Homegrouping.Asus G72 Gamer's Notebook Windows 7 Home Premium 64 Bit?
I am currently running a Server 2003 R2 domain with about 100 computers running WinXP Pro on it. Some of these computers are older tablet style computers that are used out in our shop floor area. We are looking to replace these with some newer Windows 7 mini-PC's. All of them connect to the network via wireless access points, as these stations need to be mobile so they can be taken to all areas of the shop.During the test setup of the device I can get it to join to the domain and it can connect to our main file server, which is also the primary DC, and download files with no problem. It can also connect to the mail server with no problems that I have noticed so far.
The issue arises, when it tries to connect to get Group Policy updates. when running "gpupdate /force" I get an error for both the user and computer parts of the update that says: "The Processing of Group Policy failed. Windows could not locate the directory object group policy..." When looking at the event logs, there are tons of GP errors, all of them are error 1101.
