Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Local Group Policies - Apply to All Users Except Administrators

18 Jun 2014   #10
CovenStine

Windows 7 Enterprise
 
 
Saving/Distributing

Hello,
This works GREAT for my application, but I have quite a few computers to push policies to as we're rolling out Win7 machines here, but won't be switching from AD2003 for a while yet.
I'd seen a suggestion for redeploying GP where an admin could copy the %SystemRoot%\Windows32\GroupPolicy folder from a configured computer to a new one, and run a gpupdate /force, and it's all set.
You've written a script to backup and restore (or redeploy if done right) the GP, but neither option work.
The GP must be stored elsewhere if it's only for non-admins, and I can't be chasing down workarounds if even Admins are denied access to the control panel, this method is the only way to apply GP at this time.
Do you have any suggestions for locating and copying the GP for non-admins?
Thanks!


My System SpecsSystem Spec
.
18 Jun 2014   #11
Brink

64-bit Windows 10 Pro
 
 

Hello CovenStine, and welcome to Seven Forums.

It's been a while, but see if copying the custom MSC file for administrators to the other computer, import the exported group policies, open the MSC, and force update group policy to see if that may do the trick.
My System SpecsSystem Spec
30 Jun 2014   #12
CovenStine

Windows 7 Enterprise
 
 

Hello,
Unfortunately, I haven't been able to export or import non-administrator settings, although admittedly I've only been able to try the LocalGPO tool.
Any further suggestions?
My System SpecsSystem Spec
26 Dec 2015   #13
rasctgbd

Windows 8.1 Enterprise x64
 
 
SRP not Working with Domain Users

Thank you Shawn.
According to this post, SRP is working fine with me for all local (non-administrator) users, and not working with DOMAIN USERS.

But i want to take your attention into more depth.
In my scenario, my computer in under a DOMAIN also. I want to restrict all DOMAIN USERS as well as non-administrator users.
That means, how do i RESTRICT DOMAIN USERS from running a software (say chrome.exe) by applying SRP from local group/security policy?

NOTE:
I refer the MOTHER post of this post is from Software Restriction Policies is wrongly applied to Administrator.
My System SpecsSystem Spec
.

26 Dec 2015   #14
Brink

64-bit Windows 10 Pro
 
 

Hello rasctgbd, and welcome to Seven Forums.

You might see if you may be able to use one of the methods in one of the tutorials below for this in a domain.

AppLocker - Create New Rules

Applications - Prevent Running Specified Programs

Applications - Run Only Specified Programs in Windows
My System SpecsSystem Spec
28 Dec 2015   #15
rasctgbd

Windows 8.1 Enterprise x64
 
 

Thank you. I appreciate your posts. This solution is for Local Users only.
What I need is to Restrict DOMAIN USERs as well.

Quote   Quote: Originally Posted by Brink View Post
Hello rasctgbd, and welcome to Seven Forums.

You might see if you may be able to use one of the methods in one of the tutorials below for this in a domain.

AppLocker - Create New Rules

Applications - Prevent Running Specified Programs

Applications - Run Only Specified Programs in Windows
My System SpecsSystem Spec
28 Dec 2015   #16
Brink

64-bit Windows 10 Pro
 
 

I don't have domain experience to verify, but you should be able to set this in Group Policy to have it applied to the domain.
My System SpecsSystem Spec
30 Mar 2016   #17
smo998

win7 x64
 
 

this is a great help thanks for posting. is there a way to change the users associated with this policy after it has been made. say you want to add or change users that are affected by this policy or remove the policy all together. i tried to delete the MSC file but the policy rules still affect those users. (thanks for any advise)
My System SpecsSystem Spec
30 Mar 2016   #18
Brink

64-bit Windows 10 Pro
 
 

Hello smo998, and welcome to Seven Forums.

The policy in this tutorial would be applied to all users except administrators. I'm afraid that you can't pick and choose users to apply it to. If you like, you could use the tutorial below to reset group policy to undo it though.

Local Group Policy - Reset to Default

If you wanted to apply group policy to specific users, you could use the method in the tutorial below instead.

Group Policy - Apply to a Specific User or Group
My System SpecsSystem Spec
2 Weeks Ago   #19
mfran2002

Win7 Pro x64
 
 

great procedure thanks a lot!!!

only a (very probably stupid) question: I have to set only the policies under "user configuration" section or may I act also under "computer configuration" section without involve the user administrator?

better: if I use this procedure and then modify some policies under "computer configuration", they will be applied also to administrator or not?

thanks again!
My System SpecsSystem Spec
Reply

 Local Group Policies - Apply to All Users Except Administrators




Thread Tools




Similar help and support threads
Thread Forum
Group Policy - Apply to a Specific User or Group
How to Apply Local Group Policies to Specific User or Group in Windows Windows has three layers of local GPOs: Local Group Policy Local Group Policy is the only local GPO that allows both computer configuration and user configuration settings to be applied to all users of the computer....
Tutorials
How to use local group policy editor to restrict users to Desktop
I created a policy for non-administrators in Microsoft Management Console. However, I couldn't find a policy to restrict user into a specified folder.
General Discussion
Let us apply a simple local group policy together in Windows 7.
Hello there, I have learnt creating policies files from this tutorial.. Now I am facing problem searching and configuring different policies. 1. I dont want 'student' to be able to create files/folder in c: drive. 2. I dont want 'student' to have access to the Internet. Regards.
General Discussion
Strange username in Local Users and Group
Hi, I've recently notice a strange username in the user accounts list. The username is hjjmbpdnhvPEZPIXIPO and it's under the administrator's group. Anyone have an idea what this might be? Thanks! Dave
System Security
Local Group Policies created for user, but sysprep removes settings
Hello Forum, I have a base image, where I have configured the default profile using the administrator account. I created user ids, but did not log into these ids. I used Local Group Policy to edit the policy of one non administrator ids I created. After sysprepping the computer, and...
Installation & Setup
Network Group Policies Help: Need to add Local User
I had a network guy come in and he locked a lot of my group policies out. It shows that the Administrator account is locked and disabled. I need to get into this computer and it is urgent. I have tried enabling the administrator account doing net user administrator /active:yes and it said it was...
Network & Sharing


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 01:33.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App