Local Group Policy Editor Question

[dannycc]

Hi, I have a question about the Local Group Policy Editor. I know you can either enable or disable things for all users but is there any way to enable or disable things for only a certain user group (either Standard Users in general or a customized user group created in the Local Users & Groups Editor (lusmgr.exe). For example if I want only a certain user group to be able to lock the computer, in the Local Group Policy Editor I can enable that so no-one can lock the computer but I want admins to be able too etc.

I would love it if someone could answer my question soon

Thanks
Daniel Callaghan

 

[brady]

Secpol.msc / Local Policies / User Rights ? This won't stop them from logging off...
But this will: http://www.sevenforums.com/tutorials/148523-start-menu-enable-disable-log-off.html

 

[dannycc]

Thanks but I don't want to stop them logging off (that I my eyes is a bit stupid because everyone has to log off eventualy lol) but I want only Admins to be able to lock the PC, but Standard Users can't. In the Local Group Policy Editor you only either enable or disable something for all users so I was wondering if there was a way to choose what user group you are enabling/disabling things for (Another example: I don't want standard users to be able to see the C drive but I want Admins too. You can disable seeing drives in the local group policy editor but that disables it for all users )

Thanks anyway

 

[WebMattR]

Thanks but I don't want to stop them logging off (that I my eyes is a bit stupid because everyone has to log off eventualy lol) but I want only Admins to be able to lock the PC, but Standard Users can't. In the Local Group Policy Editor you only either enable or disable something for all users so I was wondering if there was a way to choose what user group you are enabling/disabling things for (Another example: I don't want standard users to be able to see the C drive but I want Admins too. You can disable seeing drives in the local group policy editor but that disables it for all users )

Thanks anyway

You'd need an actual domain and domain level management to achieve what you're wanting, as far as I can tell.

 

[Clinkz]

You could give this a try.

Open up regedit.exe

Go to the following location:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System

On the right-hand side, create a new DWORD 32-bit value named DisableLockWorkstation and give it one of these values:

1 – Disable Lock Workstation
0 – Enable Lock Workstation

You will have to be logged in as the user you want to stop form locking the screen when making the change.

 

[James Colbert]

Be sure and back up your registry before making changes.

James

 

[dannycc]

Thanks but I don't want to stop them logging off (that I my eyes is a bit stupid because everyone has to log off eventualy lol) but I want only Admins to be able to lock the PC, but Standard Users can't. In the Local Group Policy Editor you only either enable or disable something for all users so I was wondering if there was a way to choose what user group you are enabling/disabling things for (Another example: I don't want standard users to be able to see the C drive but I want Admins too. You can disable seeing drives in the local group policy editor but that disables it for all users )

Thanks anyway

You'd need an actual domain and domain level management to achieve what you're wanting, as far as I can tell.

Is there any way to get a domain and domain management/how do I set these up?



P.S. Thanks for the replys everyone

 

[WebMattR]

I would suggest trying the registry setting suggested by Clinkz, but if they're users and not administrators, I don't know if they'd have the rights to edit the registry.

Is there any way to get a domain and domain management/how do I set these up?

I admittedly wasn't really suggesting this as a solution, I don't think. If you've a single machine that you're using (i.e: a family computer at home), this is kind of like using a tank to clear moles from your yard.

Since I'm always one to wonder as to the reasoning behind things (since maybe there's a different approach), why are you trying to keep people from locking their machines?

 

[TrigZ]

I'll refer you to: http://www.sevenforums.com/tutorials/151415-group-policy-apply-specific-user-group.html

Hope that helps.

 

[dannycc]

I'll refer you to: http://www.sevenforums.com/tutorials/151415-group-policy-apply-specific-user-group.html

Hope that helps.

That is the sort of thing I am looking for, all I need to do now is test it out And the reason I am doing this is because I have a habit of trying to be better than the computer technitions at my school because I bet they don't know how to do this as all these settings probably came with RM Comminty Connect 4 and also I would like to control the other users that I create so that people like my brother can't **** the PC up (again lol), so they are my reasons

Thanks a lot, I will tell you if the MMC works

 

[WebMattR]

I'll refer you to my reply to another post http://www.sevenforums.com/general-...king-down-windows-7-computer.html#post1296398

Hope that helps.

That is an absolutely awesome piece of information. Thank you a bunch for posting it.

 

[dannycc]

Yes it is prettey awsome and thanks again from me and it does work