Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Local Group Policy Editor Question

16 Mar 2011   #1
dannycc

Windows 7 Ultimate x84 (32 Bit)
 
 
Local Group Policy Editor Question

Hi, I have a question about the Local Group Policy Editor. I know you can either enable or disable things for all users but is there any way to enable or disable things for only a certain user group (either Standard Users in general or a customized user group created in the Local Users & Groups Editor (lusmgr.exe). For example if I want only a certain user group to be able to lock the computer, in the Local Group Policy Editor I can enable that so no-one can lock the computer but I want admins to be able too etc.

I would love it if someone could answer my question soon

Thanks
Daniel Callaghan


My System SpecsSystem Spec
.
16 Mar 2011   #2
brady

 

Secpol.msc / Local Policies / User Rights ? This won't stop them from logging off...
But this will: Start Menu - Enable or Disable Log off
My System SpecsSystem Spec
16 Mar 2011   #3
dannycc

Windows 7 Ultimate x84 (32 Bit)
 
 

Thanks but I don't want to stop them logging off (that I my eyes is a bit stupid because everyone has to log off eventualy lol) but I want only Admins to be able to lock the PC, but Standard Users can't. In the Local Group Policy Editor you only either enable or disable something for all users so I was wondering if there was a way to choose what user group you are enabling/disabling things for (Another example: I don't want standard users to be able to see the C drive but I want Admins too. You can disable seeing drives in the local group policy editor but that disables it for all users )

Thanks anyway
My System SpecsSystem Spec
.

16 Mar 2011   #4
WebMattR

W7 Professional x64
 
 

Quote   Quote: Originally Posted by dannycc View Post
Thanks but I don't want to stop them logging off (that I my eyes is a bit stupid because everyone has to log off eventualy lol) but I want only Admins to be able to lock the PC, but Standard Users can't. In the Local Group Policy Editor you only either enable or disable something for all users so I was wondering if there was a way to choose what user group you are enabling/disabling things for (Another example: I don't want standard users to be able to see the C drive but I want Admins too. You can disable seeing drives in the local group policy editor but that disables it for all users )

Thanks anyway
You'd need an actual domain and domain level management to achieve what you're wanting, as far as I can tell.
My System SpecsSystem Spec
16 Mar 2011   #5
Clinkz

Windows 7 Professional x64 Backtrack 4 R2
 
 

You could give this a try.

Open up regedit.exe

Go to the following location:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System

On the right-hand side, create a new DWORD 32-bit value named DisableLockWorkstation and give it one of these values:

1 – Disable Lock Workstation
0 – Enable Lock Workstation

You will have to be logged in as the user you want to stop form locking the screen when making the change.
My System SpecsSystem Spec
16 Mar 2011   #6
James Colbert

 
 

Be sure and back up your registry before making changes.

James
My System SpecsSystem Spec
16 Mar 2011   #7
dannycc

Windows 7 Ultimate x84 (32 Bit)
 
 

Quote   Quote: Originally Posted by WebMattR View Post
Quote   Quote: Originally Posted by dannycc View Post
Thanks but I don't want to stop them logging off (that I my eyes is a bit stupid because everyone has to log off eventualy lol) but I want only Admins to be able to lock the PC, but Standard Users can't. In the Local Group Policy Editor you only either enable or disable something for all users so I was wondering if there was a way to choose what user group you are enabling/disabling things for (Another example: I don't want standard users to be able to see the C drive but I want Admins too. You can disable seeing drives in the local group policy editor but that disables it for all users )

Thanks anyway
You'd need an actual domain and domain level management to achieve what you're wanting, as far as I can tell.
Is there any way to get a domain and domain management/how do I set these up?



P.S. Thanks for the replys everyone
My System SpecsSystem Spec
16 Mar 2011   #8
WebMattR

W7 Professional x64
 
 

I would suggest trying the registry setting suggested by Clinkz, but if they're users and not administrators, I don't know if they'd have the rights to edit the registry.
Quote   Quote: Originally Posted by dannycc View Post
Is there any way to get a domain and domain management/how do I set these up?
I admittedly wasn't really suggesting this as a solution, I don't think. If you've a single machine that you're using (i.e: a family computer at home), this is kind of like using a tank to clear moles from your yard.

Since I'm always one to wonder as to the reasoning behind things (since maybe there's a different approach), why are you trying to keep people from locking their machines?
My System SpecsSystem Spec
17 Mar 2011   #9
TrigZ

Windows 7 Ultimate x64
 
 

I'll refer you to: Group Policy - Apply to a Specific User or Group

Hope that helps.
My System SpecsSystem Spec
17 Mar 2011   #10
dannycc

Windows 7 Ultimate x84 (32 Bit)
 
 

Quote   Quote: Originally Posted by TrigZ View Post
I'll refer you to: Group Policy - Apply to a Specific User or Group

Hope that helps.
That is the sort of thing I am looking for, all I need to do now is test it out And the reason I am doing this is because I have a habit of trying to be better than the computer technitions at my school because I bet they don't know how to do this as all these settings probably came with RM Comminty Connect 4 and also I would like to control the other users that I create so that people like my brother can't **** the PC up (again lol), so they are my reasons

Thanks a lot, I will tell you if the MMC works
My System SpecsSystem Spec
Reply

 Local Group Policy Editor Question




Thread Tools





Similar help and support threads
Thread Forum
Local Group Policy Editor - Open
How to Open Local Group Policy Editor in Windows This tutorial will show you how to open the Local Group Policy Editor in Windows 7, Windows 8, and Windows 10. To search for a group policy or for it's registry key, value, and etc..., see: Group Policy Search and
Tutorials
local group policy editor
I have created three user accounts on my computer. Admin, Maint and operator...added the operator account to the group policy snap-in with very restricted policies. Problem is I have somehow associated the Admin and maint as well, how do I reset the local group policy back to default settings? I...
General Discussion
How do I limit access to the Local Group Policy Editor?
I have set some access limits on some programs, but the user that has the limits can run the Local Group Policy Editor and change the settings. How do I prevent access by other users to the Local Group Policy Editor? Thanks for the help.
System Security
Can't access Local Group Policy Editor
I want to disable the default reboot after Windows runs unattended updates as this often prevents my overnight backup from running. I have tried using the gpedit.msc routine to access the Local Computer Policy Editor but apparently that does not work in Win 7 Home Premium which I have. Is...
General Discussion
Can't find Local Group Policy editor
I have been trying to open the Local Group Policy editor as I need to check the "Lock pages in memory" option in order for a PS2 emulator to work. I can find the file when searching in my computer but when I open it it says it cannot create the MMC span-in. I have tried to add it to the MMC by...
Performance & Maintenance
Group Policy Editor or Local Security Policy
Will either of these allow me to restrict drive access to a single user only? I've tried to restrict drive access with Group Policy Editor but it applies the restriction globally--even to me the administrator. Could anyone let me know if this is possible and how to do it? Much thanks.
System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 23:34.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App