Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: How to deny access to Device manager in standard user account?

16 Sep 2016   #11
LMiller7

Windows 7 Pro 64 bit
 
 

Quote   Quote: Originally Posted by MataC View Post
Aha, so it's basically impossible to put any kind of restriction on the default Windows 7 account because its a 1 level down administrator account.

Is it possible then to allow limited/standard users to uninstall and install programs and change folders?
This may be possible in theory but it wouldn't be useful. Installing applications requires a lot of high level permissions and any account that has that would for most practical purposes be an admin account in all but name. Such an account could do a lot of damage to the system, whether by accident or intent. Any account that can install applications can uninstall them as well. Any attempt to restrict an admin level account is an exercise in futility. Any restriction you might put in place can be removed by any other admin. This an inherent characteristic of an admin account and cannot be removed.

By design an admin level account is the highest user account in the system and has complete control over the computer. It was intended that there would be one or a small number of trusted individuals with such an account. Trust is essential. If someone cannot be trusted with an admin account they shouldn't be given one. It is as simple as that.


My System SpecsSystem Spec
.
18 Sep 2016   #12
MataC

Windows 7 Ultimate x64
 
 

Quote   Quote: Originally Posted by LMiller7 View Post
Quote   Quote: Originally Posted by MataC View Post
Aha, so it's basically impossible to put any kind of restriction on the default Windows 7 account because its a 1 level down administrator account.

Is it possible then to allow limited/standard users to uninstall and install programs and change folders?
This may be possible in theory but it wouldn't be useful. Installing applications requires a lot of high level permissions and any account that has that would for most practical purposes be an admin account in all but name. Such an account could do a lot of damage to the system, whether by accident or intent. Any account that can install applications can uninstall them as well. Any attempt to restrict an admin level account is an exercise in futility. Any restriction you might put in place can be removed by any other admin. This an inherent characteristic of an admin account and cannot be removed.

By design an admin level account is the highest user account in the system and has complete control over the computer. It was intended that there would be one or a small number of trusted individuals with such an account. Trust is essential. If someone cannot be trusted with an admin account they shouldn't be given one. It is as simple as that.
Ok, I understand all that, but I'm still interested how can this be done. Via group policy maybe?
My System SpecsSystem Spec
18 Sep 2016   #13
Brink

64-bit Windows 10 Pro
 
 

MetaC,

If you like, you could use OPTION ONE below to prevent "standard users" from running Device Manager by using the "specific users or group" link in step 1.

Applications - Prevent Running Specified Programs
My System SpecsSystem Spec
.

Reply

 How to deny access to Device manager in standard user account?




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Standard User Account - File/pgm access
I can't seem to simply create a second user who has no access to files/programs on the computer by default. From what I read, that's supposed to be the default behavior? When I try it, the new 'Standard user' account can see all programs and files. I haven't previously changed permissions or...
General Discussion
Wanting to create standard user and deny seeing main account's files.
Hello, I want to create a standard user and deny him seeing files on the main account on the computer. I am using windows 7. Basically one hard drive will have the main account(set to administrator) and another account for a friend to use(set to standard). I do not want the standard user...
General Discussion
How can a standard user gain access to an administrator account?
My Son And I Share A Laptop Running Windows 7 Home Edition , Am The Administrator And He Is The Standard User But He Keeps Going In And Changing My Account To Standard User And His To Administrator , Can Someone Tell Me How He Is Doing It And How Can I Put A Stop To It
General Discussion
Deny/Block Log Off Access to other users for a specific account
Hello I want another administrator account or any other account to NOT have log-off permissions to an administrator account. Forcefully. I do not want to block task manager or anything else, it's specifically log-off permissions, usually done through task manager. The Administrator account in...
General Discussion
Standard User Account Program Access
Hello All, I have set up a standard user account on my Son's laptop, but there are software programs I would like him to have access to, without me having to log on with Administrator ever time. When he try's to run said program it says Parental Controls has blocked this program the...
Performance & Maintenance
Task Manager - Allow or Deny Access Permission
Ok, first tutorial, so Im not 100% on making a tutorial :geek: This tutorial will show you how to enable or disable task manager for a certain user. Disable Access to Task Manager 1. Open windows explorer and navigate to C:\Windows\System32 2. Scroll down to taskmgr.exe. Right click...
Tutorials


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 04:54.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App