Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Group Policy Editor


15 May 2010   #1

Windows 7
 
 
Group Policy Editor

This is sort of a branch from a previous post to do with protection a computer that will have public access.

One of the suggestions was to use the Group Policy Editor. I am somewhat inexperienced here and one thing I am not understanding; How do I make the changes (restrictions) apply to just one user (Guest) or a guest-like user and not the Administrator?

Any help is gratefully appreciated.


My System SpecsSystem Spec
.

15 May 2010   #2

Windows 7 Ultimate x64
 
 

What exactly are you trying to restrict? Program acess? Drive access? Applet access, as in certain areas of Contol Panel or even Control Panel as a whole.

I had a question similar to this not too long ago, but I specifically wanted limited drive access. If that is what you're looking for too, you would restrict the access by way of the drive itself.

Example: Go to Computer, right click the drive you want to edit, click Properties, click the Security Tab, click the Edit button, click the Add button, enter the User Name in the box and click Check Names, then OK. Then you would check Deny for whatever property of the drive that you want that User denied access to. Click Apply, then OK, then you're done.

Reply back with what you're looking to do.

BTW, Group Policy Editor is not included in the Home versions of Windows 7
My System SpecsSystem Spec
15 May 2010   #3

Windows 7
 
 

I am trying to lock down computers for public access. Things like - no programs copied or executed from USB drive or CD or DVD, no deleting software, no downloading drivers or programs, etc, etc.
My System SpecsSystem Spec
.


15 May 2010   #4

Windows 7 Ultimate x64
 
 

I'm not the professional using GPE, but I have used it a little. I would believe that you would go to User Configuration > Administrative Templates and either System or Windows Components.

With the few things I have used GPE for, I found where I needed to go by Google or by tediously clicking through (almost) every entry within System or Windows Components to find what I needed.

Hopefully someone else more knowledgeable than I can get you where you need to be in fewer steps.
My System SpecsSystem Spec
15 May 2010   #5

Windows 7
 
 
Group Policy Editing

I agree, with flexibility comes a lot of options.
I only have to figure it out once and I can move it to all the machines I am setting up.

The part I am unable to understand, how do I make the policy changes apply to one user , i.e. Guest?
My System SpecsSystem Spec
15 May 2010   #6

Windows 7 Ultimate x64
 
 

Quote   Quote: Originally Posted by rllibrary View Post
The part I am unable to understand, how do I make the policy changes apply to one user , i.e. Guest?
That was my problem, but as I stated in my first reply, it was solved by way of the drive properties (because that is what I wanted restricted access to.)

But in thinking over what you just stated, would the Parental Controls work for you? With Parental Controls, you do have a way to restrict program access to a single user, as well as setting up time limits, etc., all while having the user's logged in time saved to a log for you to monitor.
My System SpecsSystem Spec
16 May 2010   #7

Windows 7 x64 pro/ Windows 7 x86 Pro/ XP SP3 x86
 
 

Windows 7 has a feature called "Guest Mode" (different from guest account!) that prevents system setting changes, prevents installation of apps, prevents the user from writing to the disk outside of their profile and cleans up any changes made once the user logs off. You can explore all its features and determine whether it is suits you by going through this page.

http://www.winsupersite.com/win7/ff_pcsafeguard.asp

Otherwise, as pointed out, you can use the group policy editor to impose various restrictions. There are numerous things that can be done but E.g. to prevent installation of apps, you can disable the windows installer which is required for the installation and removal of software

Type gpedit.msc in Start search and hit Enter to open the Group Policy Editor. Navigate to Computer Configurations > Administrative templates > Windows Components > Windows Installer. In RHS pane double-click on Disable windows installer.


My System SpecsSystem Spec
16 May 2010   #8

Windows 7
 
 

I think we are providing more complicated answers than necessary.

Starting with Vista, you can now create multiple local group policies.

Taking advantage of Windows Vista's Multiple Local Group Policy feature | Microsoft Windows | TechRepublic.com

Simply fire up Group Policy Object Editor and follow the instructions. For us Server 2000/2003 veterans, the Group Policy Object Editor will look awful familiar.
My System SpecsSystem Spec
16 May 2010   #9

Windows 7 Ultimate x64
 
 

Quote   Quote: Originally Posted by surfasb View Post
I think we are providing more complicated answers than necessary.

Starting with Vista, you can now create multiple local group policies.

Taking advantage of Windows Vista's Multiple Local Group Policy feature | Microsoft Windows | TechRepublic.com

Simply fire up Group Policy Object Editor and follow the instructions. For us Server 2000/2003 veterans, the Group Policy Object Editor will look awful familiar.
Good answer (I already admitted I didn't know much about GPE anyways...)
My System SpecsSystem Spec
10 Dec 2010   #10

Windows 7 Pro
 
 

This is the easy way to edit local group policies for groups of non administrators on Windows 7 pro running without a domain controller:

1. Open the Microsoft management Consol (Type mmc in search box)
2. On the menu bar select File / Add or Remove Snap in
3. Select 'Group Policy Object' / Add / Browse / non-Administrators
4. Set policies that will effect all non-Administraors
5. Save console for next time
Exit

Works for me !
My System SpecsSystem Spec
Reply

 Group Policy Editor




Thread Tools



Similar help and support threads for2: Group Policy Editor
Thread Forum
Solved local group policy editor General Discussion
Solved group policy editor General Discussion
Solved Can't find Group Policy Editor General Discussion
group policy editor error Customization
Group Policy Editor or Local Security Policy System Security
Group editor policy help Software
How to launch Group Policy Editor General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 02:14 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33