Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: restrict user to use Application,USB,CDROM on standalone workstation

21 Aug 2015   #1
expressions

windows 7 64bit
 
 
restrict user to use Application,USB,CDROM on standalone workstation

hello everyone in my organization we dont have domain we have workgoup and its on windows 7
they have asked me to restrict users to open certain application and disable USB and cd rom
i tried to do it with gpedit.msc by following these steps

gpedit.msc >computer configuration >security setings >application control >applock under app lock
clicked on executable rule then right click and select new rule > permission deny > file hash > and the selected notepad.exe

one more things i choosed the user name i created and applied on it.

but the notepad gets denied on every user i have even administrator.
same thing happens when i disable USB and cd rom.


is there any way to deny access of the application on a user level and the application or USB/CDROM prompt for the administrator password to use that application or USB/CDROM
please HELP its very urgent.


My System SpecsSystem Spec
.
21 Aug 2015   #2
GokAy

Windows 7 Ultimate x64 SP1
 
 

Try Group Policy approach as described in Local Group Policies - Apply to All Users Except Administrators
My System SpecsSystem Spec
22 Aug 2015   #3
expressions

windows 7 64bit
 
 
second problem

GOKAY thanks it worked now i can apply policies on users. i disabled the control panel looked for it in run clicked it and the message i got was contact your administrator that is good, problem one is solved

second problem is deny access of the application on a user level and the application or USB/CDROM prompt for the administrator password to use that application or USB/CDROM . for example i right click on usb or an application run it as administrator give them acceess for a certain time and the the time expires automatically. and i dont need to login physically as an administrator. cause i need to do the same task remotely in different locations
My System SpecsSystem Spec
.

22 Aug 2015   #4
GokAy

Windows 7 Ultimate x64 SP1
 
 

If Group Policy won't work as you want for applications, you can use Parental Controls.
Parental Controls - Setup and Use
See the Related Tutorials at the end for how to allow/block applications.

For USB if Group Policy doesn't cut it, see if any of these mentioned methods work for you - 5 Ways to enable or disable USB Drives or Ports in Windows.

No idea for CD/DVD drives though.

Would running explorer.exe as administrator work when logged in as a locked user?
My System SpecsSystem Spec
22 Aug 2015   #5
expressions

windows 7 64bit
 
 

parental is the last option i have. i was hoping for something better like in active directory a user get prompted or if we right click the application or usb drive and run it as administrator then we can access it, but it seems like there is no way to do it in a standalone OS. lets see what happens when i tell this to my BOSS
thank you for your support and help really appreciate it.
My System SpecsSystem Spec
22 Aug 2015   #6
GokAy

Windows 7 Ultimate x64 SP1
 
 

Do you have UAC enabled? You can try right click running as admin for programs. But I have no idea if you are supposed to be asked for admin credentials when trying to start a locked device.
My System SpecsSystem Spec
22 Aug 2015   #7
expressions

windows 7 64bit
 
 

just tried UAC it does not have many features all it is doing is showing alerts every time on every single task
My System SpecsSystem Spec
23 Aug 2015   #8
GokAy

Windows 7 Ultimate x64 SP1
 
 

Did you have it disabled to start with? The default UAC setting is 1 tick below the top setting, not the top one.
My System SpecsSystem Spec
23 Aug 2015   #9
UsernameIssues

W7 Pro SP1 64bit
 
 

Quote   Quote: Originally Posted by expressions View Post
...for example i right click on usb or an application run it as administrator give them access for a certain time and the the time expires automatically. and i dont need to login physically as an administrator. cause i need to do the same task remotely in different locations
That is not going to happen at the application level automatically using Group Policy or Parental Controls.

If I am understanding you correctly...
...you could get a phone call from a user at 9am
...you remote into a the computer being used by that user
...you right-click on an app and select run as admin from the context menu
...you enter the admin credentials
...you end your remote control session
...the user that called you uses the app that you started
...that app automatically ends one* hour after you started the app.

*or some other length of time.
My System SpecsSystem Spec
23 Aug 2015   #10
expressions

windows 7 64bit
 
 

UsernameIssues yes this is exactly what i need.

just now i tried to install nero on a standard user i created and its able to install that program. thats not good.
My System SpecsSystem Spec
Reply

 restrict user to use Application,USB,CDROM on standalone workstation




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Can I restrict access to the file only to one user?
Can I restrict access to the file only to one user (with administrator permission)? Even if another user has administrator permission. ps it is about system file Windows\System32\drivers\etc\hosts if this is important.
General Discussion
How to restrict a certain user from running a certain program
Hello, I'm running windows 7 ultimate 64bit, and I've been trying to figure out how to stop my sister from running two programs only, so far I haven't been able to do it using gpedit.msc, the thing is I see an option to stop all user from running software and then manually add the software that...
General Discussion
How can I restrict regular users from shutting down their workstation?
Hi All, I work in a domain environment administering a large number of workstations running Windows 7 enterprise. I want to restrict regular users from shutting down their PCs so that I can perform remote administrative tasks without walking out on the floor and ensuring all 300 + machines are...
General Discussion
how to restrict a user
hello every one I'm using windows 7 64x ultimate I sometimes play games on on it. my brother has been annoying me to play on it as well I want to make a standard user for him while restricting what programs he can use. basically I want him to be able to play the games even if they may require...
Customization
How to I restrict a user from access to partitions?
I have 8 partitions on my computer and I have a roomate now and he needs to use my computer, but i want to restrict access so he can only use the C drive not the other partitions that I have any help appreciated
System Security
Restrict sites per user
How can I restrict websites on a per user basis? Thanks -Matthew
Browsers & Mail


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 13:09.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App