Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Help with Group Policy?

27 Oct 2009   #1
CIS

Microsoft® Windows 7™ Ultimate
 
 
Help with Group Policy?

Hi everyone,

I Googled this to death, but could not find a direct or easy answer to how to do this or even if its possible.

I want to know if its possible, on one local machine, to apply Group Policy restrictions to just one user account, or at least to prevent the restrictions from being applied to the administrator account? When I apply the Group Policy restrictions they do work, but they're automatically applied to (my) admin account as well.

Is there any feasible way to figure this out? You'd think it would be possible to do.

Thank you SO much to anyone who helps out.


My System SpecsSystem Spec
.

27 Oct 2009   #2

Windows 7 Ultimate x64 x2 + x86 + Windows 8.1 x64 x2
 
 

Hi CIS,

As the concept of group policy is derived from the Client server network model a local policy, which I would assume is the type involved here, will apply to all local accounts.

If you can give more information on the restrictions you are trying to apply there may be an alternative method of achieving this for certain user groups only
My System SpecsSystem Spec
27 Oct 2009   #3
CIS

Microsoft® Windows 7™ Ultimate
 
 

Thanks muchly for your quick reply, Nigel!

Basically I want to prevent the people who use the standard user account from closing a certain progam that will run from startup... it's the OpenDNS automatic IP updater software.

I know that Group Policy can block both the task manager and the system tray, so I'd hoped to use it. I can still use GP if there are no other workarounds, I'll just have to temporarily remove the settings every time I want to use the computer... which is a minor nuisance but I figured there must be a way to avoid applying the Group Policy restrictions to the admin account altogether.

Anyway thanks for your assistance.
My System SpecsSystem Spec
.


27 Oct 2009   #4

Windows 7 Ultimate x64 x2 + x86 + Windows 8.1 x64 x2
 
 

One way that may work is to change the user permissions on the executable for the program you wish to restrict

for the task manager this would be taskmgr.exe.

if you add specific rights for those users you wish to use it and remove all the access from the everyone group from the executable, that should stop anyone using it you do not want to.

Another way would be to add the run as administrator to taskmgr.exe. any attempted use by a std user account should cause a UAC elevation prompt.

If I recall the actual openDNS updator can be hidden so that may be enough depending on the level of your users.

The run as admin trick is more difficult with this directly as you presumably wish it to run from a std user login - this is possible by setting the run as admin and then starting the program by use of a start-up task scheduler event for each user with the run with highest rights set on.

One warning with any of this is of course make a backup of the program before you experiment in case you lock yourself out.

You may feel that the group policy method is easier of course
My System SpecsSystem Spec
27 Oct 2009   #5
CIS

Microsoft® Windows 7™ Ultimate
 
 

Thanks again for your suggestions, Nigel.

I checked OpenDNS Updater and yes, it turns out there is an auto-hide option. Now all I have to do is disable the Task Manager, which I'll just do through Group Policy.

Thanks!!
My System SpecsSystem Spec
Reply

 Help with Group Policy?




Thread Tools



Similar help and support threads for2: Help with Group Policy?
Thread Forum
Group Policy - Apply to a Specific User or Group Tutorials
Group Policy General Discussion
Group Policy Applies Policy EXCEPT for 1 Setting! General Discussion
Group Policy Network & Sharing
Help with group policy Software
Group Policy Editor or Local Security Policy System Security
Group Policy.... Network & Sharing

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 09:28 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33