Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Help with Group Policy?

27 Oct 2009   #1

Microsoft® Windows 7™ Ultimate
Help with Group Policy?

Hi everyone,

I Googled this to death, but could not find a direct or easy answer to how to do this or even if its possible.

I want to know if its possible, on one local machine, to apply Group Policy restrictions to just one user account, or at least to prevent the restrictions from being applied to the administrator account? When I apply the Group Policy restrictions they do work, but they're automatically applied to (my) admin account as well.

Is there any feasible way to figure this out? You'd think it would be possible to do.

Thank you SO much to anyone who helps out.

My System SpecsSystem Spec
27 Oct 2009   #2

Windows 10 Pro x64 x3, Ubuntu


As the concept of group policy is derived from the Client server network model a local policy, which I would assume is the type involved here, will apply to all local accounts.

If you can give more information on the restrictions you are trying to apply there may be an alternative method of achieving this for certain user groups only
My System SpecsSystem Spec
27 Oct 2009   #3

Microsoft® Windows 7™ Ultimate

Thanks muchly for your quick reply, Nigel!

Basically I want to prevent the people who use the standard user account from closing a certain progam that will run from startup... it's the OpenDNS automatic IP updater software.

I know that Group Policy can block both the task manager and the system tray, so I'd hoped to use it. I can still use GP if there are no other workarounds, I'll just have to temporarily remove the settings every time I want to use the computer... which is a minor nuisance but I figured there must be a way to avoid applying the Group Policy restrictions to the admin account altogether.

Anyway thanks for your assistance.
My System SpecsSystem Spec

27 Oct 2009   #4

Windows 10 Pro x64 x3, Ubuntu

One way that may work is to change the user permissions on the executable for the program you wish to restrict

for the task manager this would be taskmgr.exe.

if you add specific rights for those users you wish to use it and remove all the access from the everyone group from the executable, that should stop anyone using it you do not want to.

Another way would be to add the run as administrator to taskmgr.exe. any attempted use by a std user account should cause a UAC elevation prompt.

If I recall the actual openDNS updator can be hidden so that may be enough depending on the level of your users.

The run as admin trick is more difficult with this directly as you presumably wish it to run from a std user login - this is possible by setting the run as admin and then starting the program by use of a start-up task scheduler event for each user with the run with highest rights set on.

One warning with any of this is of course make a backup of the program before you experiment in case you lock yourself out.

You may feel that the group policy method is easier of course :)
My System SpecsSystem Spec
27 Oct 2009   #5

Microsoft® Windows 7™ Ultimate

Thanks again for your suggestions, Nigel.

I checked OpenDNS Updater and yes, it turns out there is an auto-hide option. Now all I have to do is disable the Task Manager, which I'll just do through Group Policy.

My System SpecsSystem Spec

 Help with Group Policy?

Thread Tools

Similar help and support threads
Thread Forum
Group Policy is set on home computer, but never in any group?
Got an issue with Group Policy on a home computer system that's never left home and is now subject to Group Policy and is the only computer at home. Something caused this. OS is Windows 7 Home Edition This Group Policy locks the User account login so you can no longer log-in after clicking...
Performance & Maintenance
Group Policy - Apply to a Specific User or Group
How to Apply Local Group Policies to Specific User or Group in Windows Windows has three layers of local GPOs: Local Group Policy Local Group Policy is the only local GPO that allows both computer configuration and user configuration settings to be applied to all users of the computer....
Group Policy Applies Policy EXCEPT for 1 Setting!
Hi all! Windows 7 Pro 32 bit on a domain I've NEVER seen this before and I cant figure it out. I have a group policy set on an OU named LAPTOPS. The policy gets applied, however the User Config\Windows Setting\Scripts\Logon DOES NOT. When you run the GPRESULTS on the laptop, I see the...
General Discussion
Help with group policy
hi i have a laptop with a limited account. currently it has group policy on it which blocks me from running EXE's. i have uploaded a pic showing what happens when i open one. i have noticed that when i run the update file from Adobe to update flash it...
Group Policy Editor or Local Security Policy
Will either of these allow me to restrict drive access to a single user only? I've tried to restrict drive access with Group Policy Editor but it applies the restriction globally--even to me the administrator. Could anyone let me know if this is possible and how to do it? Much thanks.
System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 04:53.
Twitter Facebook Google+