Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: controlling non-admin account

28 May 2010   #11
Bill2

Windows 7 x64 pro/ Windows 7 x86 Pro/ XP SP3 x86
 
 

I just noticed, you're using win7 RC. That edition is time bombed, it'll expire on June1. After that, it'll be virtually unusable. I hope you have planned to acquire RTM before that.


My System SpecsSystem Spec
.
28 May 2010   #12
iGotQuestion

Windows 7 Ultimate Final
 
 

hmm... this is good but ideally i would like to use the group policy editor. is it possible to use the management console to do this?

blocking access to programs is one the things i want to achieve along with things like custom homepages, disable windows update, etc. which are all available in the group policy editor
My System SpecsSystem Spec
28 May 2010   #13
iGotQuestion

Windows 7 Ultimate Final
 
 

@Bill2.. i'm using windows 7 final now.. hadn't updated the thing in the forums
My System SpecsSystem Spec
.

28 May 2010   #14
Bill2

Windows 7 x64 pro/ Windows 7 x86 Pro/ XP SP3 x86
 
 

Well, as far as Regedit and Command Prompt are concerned, the most convenient way would be to set them to run as administrator. Obviously for this you need to have a password protected admin account. Login to your Standard user account, right click on on each exe, then check the box labelled run as administrator. It'll prompt you for your admin credentials. Of course the admin user will also be required to enter the admin credentials but thats a small price to pay. Turning these off in gpedit will, afaik, turn them off for all users.

Try doing this, then get back so we know whether it works. We'll go ahead from there.
My System SpecsSystem Spec
28 May 2010   #15
iGotQuestion

Windows 7 Ultimate Final
 
 

that worked but i think i found a better solution. i went to the microsoft management console and added a new group policy object snap-in. when the "select group policy object" window opened i selected browse ---> users ---> non-administrators. then i enabled all the group policies i wanted and they were applied to the standard account, not the administrator account, like i wanted.

the only problem i have now is that if i open the management console again.. the snap-in is not visible under the console root. this means that i wont be able to revert the changes i made if need be. is there a solution to this?
My System SpecsSystem Spec
28 May 2010   #16
Barman58

Windows 10 Pro x64 x3, Ubuntu
 
 

If you save the console that you have created it should then be openable at will as a separate GPedit

It is an admin only application so should be safe but best saves in the admin account start menu to be sure

One other thing the Windows update can be switched off for non admin users in the windows update applet in control panel
My System SpecsSystem Spec
28 May 2010   #17
iGotQuestion

Windows 7 Ultimate Final
 
 

I noticed that once the file was saved and then deleted.. the account still had the restrictions that i had set but when i open up gpedit.msc the settings concerned were in their default state. so in this case if the saved file is deleted.. i don't see anyway of reverting the changes i originally made to the standard account.

this is a big problem for me because.. the computer is my friends laptop and i need to be able to revert the settings should something not work as my friend intended it to.
My System SpecsSystem Spec
28 May 2010   #18
Barman58

Windows 10 Pro x64 x3, Ubuntu
 
 

The test file I made was only 66kB so all I could suggest is to make a backup of the custom console and take it with you - did you re-try making the same console after you deleted it - will the settings show then?
My System SpecsSystem Spec
28 May 2010   #19
iGotQuestion

Windows 7 Ultimate Final
 
 

once i have used the mmc snap-in and configured the group policies i cannot revert the changes regardless of if i have the mmc file or not. if i then go to gpedit.msc and make the same settings, they are applied system wide as expected.
My System SpecsSystem Spec
28 May 2010   #20
Barman58

Windows 10 Pro x64 x3, Ubuntu
 
 

Ok I've just changed an item on my test console here When I close the console I was prompted to save changes to console - which I accepted.

When I re-opened the console file, by clicking on the file, the changes I made were still present and could be edited.

So there is some retention - As I said, AFAIK the only real way to protect these changes would be to copy the file of the system
My System SpecsSystem Spec
Reply

 controlling non-admin account




Thread Tools




Similar help and support threads
Thread Forum
User Profile/Account problem (can't login to original admin account)
I'm the only user on this laptop and my admin account was called "HybridPC" and I disabled the windows login screen. (Turn computer on and goes right to desktop). One day the welcome screen popped up out of nowhere and I had to login. I tried disabling the login screen to where it was before and...
General Discussion
Weird account problem Admin account not at login screen
This is very strange. A few weeks ago someone in my household created a user account with administrative privileges and changed the other accounts to standard users. Problem is that now we can not log on to the account. It isn't on the log in screen. All I can do it see it through the manage...
General Discussion
built-in admin account vs regular admin account
Pretty basic question (I think). Is the built-in administrator's account exactly the same as a manually created local administrator's account privilege wise? Or does the built-in possess inherently elevated privileges? I have googled around, however, I can't find a clear answer for this. ...
General Discussion
Windows 7 admin account is locked, on;y stuck with a standard account.
Hi, I basically had 3 accounts on my computer, one being "Administrator" (w Admin rights), one "test" (Standard User rights) and one more "User" that is the one I use most frequently (with Admin rights). When I last used it last Friday the User account was still present and all my programs were...
General Discussion
Using default admin account vs standard user account
I have always been running admin and even until now I run as admin. But, I have been doing a little bit of research and realize that using a standard account is a safer practice. I have never even used a standard account. Is using a standard account a better practice? Also, how does doing average...
General Discussion
Access my user account encrypted files from my admin account?
I have a set of folder I encrypted from my user account. I haven't figured out how to access them from my admin account. In reverse, while logged on my admin account, I droppped some files into folder encrypted by my user account. I can't access those files when I log on as a user. How can I...
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 04:47.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App