Editing User Groups: Disable The Ability To Install?
Jul 1, 2010
How do you edit user groups? I want to disable the ability to install (any) programs for all users except the one admin account. This is what I have so far:
going through control_panel>user_accounts> and switching the account to a limited doesn't work (some progs can still be installed).Going into computer Management gives me the ability to look at the groups and move user names from one group to another, but I can't edit/modify what each group is allowed to do. Right clicking on group and selecting properties gives me this.Going into Group_Policy allows me to edit what users can do, but it applies the changes to every user (including the admin).
I am building a multiuser system using Roaming Profiles. I would like to customize the "Start > All Programs" menu to the user's user group. For example I would like to have Program Group that contains basic programs that every user would use. Then have Programmers group that contains Basic applications + programming applications. Ideally the Program Groups should be assigned based on the user's group.A user can belong to multiple groups.
Does one group take precedence over the other. I had a situation where the user's accoutn was in both groups but when trying to install software,it appeared as if he did not have enough privileges. One of my technicians signed in as administrator and was able to install the software without a problem. When he signed in as the user who was in both Power Users and Admins, he said the install did not work. So the general question is how does Windows decide how to apply group membership roles.
When starting programs IE 6.0, 'help and support' and trying to use 'user groups' and 'system restore' the applications all encounter a problem. All of the error reports refer to "ModName: mshtnl.dll". This problem first began after using system restore to go back to earlier settings. After going back to earlier setting all was okay until windows installed automatic updates and automatically reset the computer and thats when mshtml.dll errors began.ERROR: "Internet Explorer has encountered a problem and needs to close. We are sorry for the inconvenience"[I]AppName: iexplore.exe, AppVer: 6.0.2900.2180, ModName: mshtmled.dll, ModVer:6.0.2900.3059, Offset: 00061e69
I'm going to create 30+ user accounts. They will be all running at the same time, running the same program. (the only way I've figured out how to dual-boot the same program) and I was wondering... Is there anyway to make it somehow use less resources doing so? Like, so far I've gone into Advanced > Performance and killed the switch on everything. I was just wondering, after days of running non-stop, it is bound to start eating up RAM or even cache to much, right? If so, what can I do to stretch the time this happens in? What else can I switch off/disable for each user to eat up less resources?
I really like the Luna interface, and how well-organized the Start Menu and the Explorer are. Like Groups -- how when you open My Computer it's got "Files Stored on This Computer," "Hard Disk Drives," and "Devices with Removable Storage." I've found out how to create groups and organize them based on name, file type, date last accessed, and so on.
But what I really want to do is create custom groups, with their own names, and drag-and-drop files and folders into them. Like when I open My Documents, and all of my document folders are mixed in with My Music and such. I want to create a custom group and put My Music, My Pictures, and My Videos in it, and then have all my other folders in a second group. How do I do that?
Im trying to remove IE priveledges for 1 limited user account for an XP home machine; but still have other user accounts have permission to access the browser. This is a workgroup enviroment. Right now; it appears by editing group policies; I can disable IE for ALL users or enable for ALL users, but can't select who can have it and who cannot
Lots of schools need to run one desktop for all users. Not a standard default user template. But to actually disable user profiles like you could in windows 98. With 2600 users xp takes to long to login when it has to create a profile each time because we use a security program that freezes the desktop and dismisses any changes to the c: once rebooted.Does anyone know of a way to disable user profiles or assign a profile where everyone uses it and a new local one is not created
I have XP set up with user accounts for each family member with myself as administrator and everyone else as limited accounts.Is there a way that I can disable printing from some of the user accounts? My 3yo daughter has a habit of printing stuff by accident 10 or so times.
Can't install the fax service on it.I go to Add/Remove Programs - Add Windows Components and select the fax service. It appears to install and the Fax even appears in Printers and Faxes for about 1 second, then vanishes.Has anyone else experienced this?More info:There is an Epson Stylus DX9400F all-in-one installed. Don't know if that is the reason for not being able to install the fax?
Recently I haven't been able to install certain programs due to Internal Error 2908.When I press OK in the message box another one opens and all I can do is kill the setup program in Task Manager.I guess this is some sort of registry problem.
I know that I can unzip things with WinXP, but can I create a zipped file? I tried doing this with a large adobe acrobat file, and with a jpeg file, and although it SHOWED a new zip file, when I checked the size of the files, both of them were only five kb smaller than before. That's not much, I'm thinking, lol. What I did, was to right-click on the file and chose "send to" and then chose "compressed (zipped) file."
After doing some maintenance on my computer, simply removing old unused programs through the "add / remove programs" option in 'control panel', I lost my ability to have any XP based theme. While I was doing the cleanup a few programs asked me to restart or continue, I selected continue until I was done removing all of the programs that I no longer needed or used... Once I did restart it came back up and everything runs great, but No XP look
I have Windows XP on a Dell 8300. Recently. after running one of those programs that supposedly cleanup your registry, I lost the ability to run my screen savers. On the "Display" menu the spot where you are to decide the amount of time that is to pass before the screen saver comes up is greyed out. I am guessing that one or more of my dll's was removed or corrupted.
Did Windows recently send out any updates that would have removed the option to stretch or tile wallpaper on the desktop? As recently as last week I applied new Wallpaper to my desktop then as usual right clicked on the desktop and selected stretch to fill the screen. Today I again changed the Wallpaper but when I right click on my Desktop and select properties there is no longer any option button to select tile or stretch. While searching for information about this I saw a post by someone else who described the exact same problem.
i am trying to get my bluetooth setup however my computer will not let me turn on discovery mode once i check the box and click apply it gives me and error message that simply says unable to turn on discover ability
I've gotten to the pulling the hair out stage with this. I have no right click ability in my standard PS2 mouse. At first I thought the mouse itself had failed but a scan with CCleaner's Reg Cleaner revealed a problem with the mouse shell. The .dll in question is:pxwma.dllAn SFC /SCANNOW and numerous reboots have failed to fix the issue, as has a re-installation of the driver or logging into Windows Update and checking for Hardware Updates (none available).I attempted to re-register the .dll but the response was that the module for it did not exist. I therefore download pxwma.dll and coppied it to my System 32 folder and tried to register it again. The response this time was
my computer Seems it ran and ran behind the scenes when I booted up and would take 10 minutes to hit another key and wait again. I went to MSCONFIG and removed the x from most ot the start up programs. It now works but some where I lost my ability to get on line or onto Outlook express. I have highspeed cable, with a backup computer, my backup computer works I have tried the hookup wizzards several times but in vain
I recently purchased a new computer that came free with it's own Photo Shop program, so every time I try to edit a picture in My Pictures folder it opens THAT program instead of PAINT, which is what I want to edit the pictures in. Anyone got any clues how to set it right?
When attempting to Edit photos in My Pictures, window pops up advising that, "This file does not have a program associated with it for performing this action. Create an association in the Folder Options control panel."
can u explain with a example please.Example : disabling autorun for CD drive[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesCdrom]"AutoRun"=dword:00000000 [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorerNoDriveTypeAutoRun]"NoDriveTypeAutoRun"=dword:000000b1[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer]"NoDriveTypeAutoRun"=dword:000000b1 Any website for learning registry editing?
I use XP and I am the administator, but I'm not allowed to use the registry editor. How do I find/access the editor and/or change the properties so I can edit reg files?
Alot of times before editing registries, or boot.inis, or anything like that.MicroSoft and other sites, will usually/always say,back it up first However,they never tell you how to use the backup if you do mess up .
Windows XP lets remote registry editing by running a service for it. Below are the step-by-step instructions to disable this security hole:1. Goto your control panel (you can do this by clicking on your start menu)2. Select administrative tools - services3. On the right panel, find the service called "remote registry"4. Right click on it and select properties5. In the startup type option box, select disable6. Reboot you computer and repeat steps 1-4. You should see it won't be running anymore.
I followed this guide, to add options when you right click, but instead of editing folder, I actually edited file folder.It said at the bottom you need to go to HKEY_CLASSES_ROOTFoldershellCreate_File_Listing in the registry to remove it, but i couldn't find file folder.I want it back again so when i double click a folder, it opens the folder. I didn't know what the windows explorer .exe name was or where it was stored, so for the time being i have to right click>>Open
I was trying to remove some items from the start up list on msconfig. It then told me to reboot. So after I logged on, a message popped up saying that I had altered the start up list. Is this normal/okay and can I press "don't show this message again"?
I am unable to successfully boot up Win2K on my one hard drive because Symantec Ghost is failing to load. Specifically, the error message reads that the Logon User Interface Failed: File c:/Program Files/Symantec/Norton/Ghost/ginastub.dll has failed to load. There is no other option but to restart and it just comes back to this message. All support I have found about this message points to deleting the ginastub.dll Registry key. However, I can't not get to that hard drive's registry because (1) windows does not load, (2) since windows does not completely load, I can not edit the registry through the network. So, I am left with adding the HD as a slave to another computer and editing the Registry that way. Does anyone know how that can be done, editing a secondary hard drive's Registry?
I have got the following error on XP under a video editing app. The app is VirtualDubMod. I never got this error before. The error is below. The instruction "0x025397a8" referenced memory at "0x01bc39f0". The memory could not be read. What exactly does that mean? How do I fix it? Is it possible to fix it?
