Local Group Policies - Apply to All Users Except Administrators

Page 2 of 3 FirstFirst 123 LastLast

  1. Posts : 2
    Windows 7 Enterprise
       #10

    Saving/Distributing


    Hello,
    This works GREAT for my application, but I have quite a few computers to push policies to as we're rolling out Win7 machines here, but won't be switching from AD2003 for a while yet.
    I'd seen a suggestion for redeploying GP where an admin could copy the %SystemRoot%\Windows32\GroupPolicy folder from a configured computer to a new one, and run a gpupdate /force, and it's all set.
    You've written a script to backup and restore (or redeploy if done right) the GP, but neither option work.
    The GP must be stored elsewhere if it's only for non-admins, and I can't be chasing down workarounds if even Admins are denied access to the control panel, this method is the only way to apply GP at this time.
    Do you have any suggestions for locating and copying the GP for non-admins?
    Thanks!
      My Computer


  2. Posts : 72,041
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #11

    Hello CovenStine, and welcome to Seven Forums.

    It's been a while, but see if copying the custom MSC file for administrators to the other computer, import the exported group policies, open the MSC, and force update group policy to see if that may do the trick.
      My Computer


  3. Posts : 2
    Windows 7 Enterprise
       #12

    Hello,
    Unfortunately, I haven't been able to export or import non-administrator settings, although admittedly I've only been able to try the LocalGPO tool.
    Any further suggestions?
      My Computer


  4. Posts : 2
    Windows 8.1 Enterprise x64
       #13

    SRP not Working with Domain Users


    Thank you Shawn.
    According to this post, SRP is working fine with me for all local (non-administrator) users, and not working with DOMAIN USERS.

    But i want to take your attention into more depth.
    In my scenario, my computer in under a DOMAIN also. I want to restrict all DOMAIN USERS as well as non-administrator users.
    That means, how do i RESTRICT DOMAIN USERS from running a software (say chrome.exe) by applying SRP from local group/security policy?

    NOTE:
    I refer the MOTHER post of this post is from Software Restriction Policies is wrongly applied to Administrator.
      My Computer


  5. Posts : 72,041
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #14

    Hello rasctgbd, and welcome to Seven Forums. :)

    You might see if you may be able to use one of the methods in one of the tutorials below for this in a domain.

    AppLocker - Create New Rules

    Applications - Prevent Running Specified Programs

    Applications - Run Only Specified Programs in Windows
      My Computer


  6. Posts : 2
    Windows 8.1 Enterprise x64
       #15

    Thank you. I appreciate your posts. This solution is for Local Users only.
    What I need is to Restrict DOMAIN USERs as well.

    Brink said:
    Hello rasctgbd, and welcome to Seven Forums. :)

    You might see if you may be able to use one of the methods in one of the tutorials below for this in a domain.

    AppLocker - Create New Rules

    Applications - Prevent Running Specified Programs

    Applications - Run Only Specified Programs in Windows
      My Computer


  7. Posts : 72,041
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #16

    I don't have domain experience to verify, but you should be able to set this in Group Policy to have it applied to the domain.
      My Computer


  8. Posts : 1
    win7 x64
       #17

    this is a great help thanks for posting. is there a way to change the users associated with this policy after it has been made. say you want to add or change users that are affected by this policy or remove the policy all together. i tried to delete the MSC file but the policy rules still affect those users. (thanks for any advise)
      My Computer


  9. Posts : 72,041
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #18

    Hello smo998, and welcome to Seven Forums. :)

    The policy in this tutorial would be applied to all users except administrators. I'm afraid that you can't pick and choose users to apply it to. If you like, you could use the tutorial below to reset group policy to undo it though.

    Local Group Policy - Reset to Default

    If you wanted to apply group policy to specific users, you could use the method in the tutorial below instead.

    Group Policy - Apply to a Specific User or Group
      My Computer


  10. Posts : 6
    Win7 Pro x64
       #19

    great procedure thanks a lot!!!

    only a (very probably stupid) question: I have to set only the policies under "user configuration" section or may I act also under "computer configuration" section without involve the user administrator?

    better: if I use this procedure and then modify some policies under "computer configuration", they will be applied also to administrator or not?

    thanks again!
      My Computer


 
Page 2 of 3 FirstFirst 123 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 03:24.
Find Us