Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: How to set permissions in windows server 2012 ?

24 Aug 2015   #1
Adonix44

Windows 7 Ultimate x64
 
 
How to set permissions in windows server 2012 ?

Hello,..

There are suppose some pre-made groups in windows server 2012,..like guest, remote desktop users, administrator, administrators...etc...

So i want to know that how to modify "administrators" group settings to limit/disable some permissions without affecting "administrator" group !

Kindly help me.

Thanks


My System SpecsSystem Spec
.
25 Aug 2015   #2
Pyprohly

Windows 10, Windows 8.1 Pro, Windows 7 Professional, OS X El Capitan
 
 

Hi,

Which permissions/privileges in particular where you looking to remove from administrators?
My System SpecsSystem Spec
25 Aug 2015   #3
Adonix44

Windows 7 Ultimate x64
 
 

Quote   Quote: Originally Posted by Pyprohly View Post
Hi,

Which permissions/privileges in particular where you looking to remove from administrators?
Well disabling permissions like task manager access, control panel access, group policy access or network setting access,..like these things to disable for "administrators" group !
My System SpecsSystem Spec
.

26 Aug 2015   #4
Pyprohly

Windows 10, Windows 8.1 Pro, Windows 7 Professional, OS X El Capitan
 
 

All of these programs (except for Group Policy) can be disabled though the Group Policy Editor.

The settings to deny all users access to the Task Manager, Control Panel, the Registry editor, and network settings follow respectively,
  • User Configuration -> Administrative Templates -> System -> Ctrl+Alt+Del Options -> Remove Task Manager
  • User Configuration -> Administrative Templates -> Control Panel -> Prohibit access to Control Panel and PC settings
  • User Configuration -> Administrative Templates -> System -> Prevent access to registry editing tools
  • User Configuration -> Administrative Templates -> Network -> Network Connections -> (lots of settings to play around with here)

To disable Group Policy itself, there isn't a group policy setting obviously, but you can edit a registry key for that,
Code:
reg add "HKCU\Software\Policies\Microsoft\MMC\{8FC0B734-A0E1-11D1-A7D3-0000F87571E3}" /v Restrict_Run /t REG_DWORD /d 1 /f
and to enable access to Group Policy again,
Code:
reg add "HKCU\Software\Policies\Microsoft\MMC\{8FC0B734-A0E1-11D1-A7D3-0000F87571E3}" /v Restrict_Run /t REG_DWORD /d 0 /f
My System SpecsSystem Spec
26 Aug 2015   #5
Adonix44

Windows 7 Ultimate x64
 
 

Dear Pyprohly,..

These settings will block access of "Administrator" group also :'(
I only want to deny these things from "Administrators" group.
My System SpecsSystem Spec
26 Aug 2015   #6
LMiller7

Windows 7 Pro 64 bit
 
 

Attempting to limit what an administrator can do is an exercise in futility. Any limitations you might set in place can be removed by any other administrator. All administrators are equal. Any administrator can change the password of any other account (including the built in Administrator account) without knowing the existing password. The Administrator account has no special rights or privileges. The only practical thing that sets this account apart is that it is not influenced by UAC and it cannot be deleted.

All of this is by design and cannot be changed.

By "administrator" I mean any member of the "Administrators" group.

Any problems you are having with administrators need to be solved by non technical means. This includes setting company policies that all must follow and with appropriate consequences for those who do not.
My System SpecsSystem Spec
26 Aug 2015   #7
GokAy

Windows 7 Ultimate x64 SP1
 
 

There are other built-in groups you could study to see if any of them fit your needs. In an Active Directory environment, you can fine tune some administrators by creating a custom group and delegating rights and permissions which they cannot bypass, but on a standalone server I am not sure if this can be done (not saying impossible, just haven't done myself).

Some detail https://technet.microsoft.com/en-us/.../cc700835.aspx
My System SpecsSystem Spec
26 Aug 2015   #8
LMiller7

Windows 7 Pro 64 bit
 
 

In a domain setting you can restrict the rights of a local administrator. On the domain controller itself there are no local groups. In a stand alone server this is an exercise in futility. Nothing in the original post suggests there is a domain.
My System SpecsSystem Spec
26 Aug 2015   #9
GokAy

Windows 7 Ultimate x64 SP1
 
 

True that LMiller. Perhaps OP can tell us what kind of rights he wants to give to these "admins" and maybe we can advice on what can be done (if possible).
My System SpecsSystem Spec
26 Aug 2015   #10
Adonix44

Windows 7 Ultimate x64
 
 

Could anyone tell how to fix the issue shown in img file attached ?
Without this fix i can't able to access anything


Attached Images
How to set permissions in windows server 2012 ?-captuggre.png 
My System SpecsSystem Spec
Reply

 How to set permissions in windows server 2012 ?




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Problem with AOL Server in Windows Live Mail 2012
I tried setting my mates AOL email account (imap) tonight in Windows Live Mail 2012, everything went fine until it was time to "download" the folders from AOL, we keep on getting a "Server error message" and the folders will not download. Now I know nothing about AOL as I'm in Aust. and my mate is...
Browsers & Mail
windows server 2012
Hi all, I've just purchased a HP micro server (£100 cashback deal) as want to learn windows server 2012 and also look to setup a home server. can anyone recommend or point me in the direction of books, videos on where i can learn about installation / setup and maintaining a server setup for...
Network & Sharing
Today is the RTM for Windows Server 2012 R2!
Source: Today is the RTM for Windows Server 2012 R2! - In the Cloud - Site Home - TechNet Blogs
News
“Internet explorer” message in windows server 2012,
“Internet explorer” message in windows server 2012, I’m wondering why the attached messages appear each time any software is launched in windows server 2012. How to stop having these messages? Thank you Best
Browsers & Mail
Bootable USB for Windows Server 2012
Hi I downloaded the .iso of windows server standard 2012. I was told to use the windows 7 usb dvd download tool but when I browse to the .iso of windows server standard 2012 and try to load it. It says that "the selected file is not a valid ISO file. Please select a valid ISO file and try...
Windows Updates & Activation


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 05:49.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App