Local Group Policies - Apply to All Users Except Administrators

Page 3 of 3 FirstFirst 123

  1. Brink
    Posts : 72,051
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       New #20

    Hello mfran, :)

    Configured policies under "Computer Configuration" would be applied to all users.

    The procedure in the tutorial would only show policies under "User Configuration" though.
      My Computer
    Quote Quote

  3. mfran2002
    Posts : 6
    Win7 Pro x64
       New #21

    Hi Brink and thans or your reply
    you are right, but I should disable the user right to install programs.

    I only thought to activate "disable windows installer" but it is under

    "computer configuration - administrative templates - windows components - windows installer"

    so I cannot use it...

    do you know how I could do?

    thanks a lot for your help
      My Computer
    Quote Quote

  4. Brink
    Posts : 72,051
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       New #22

    You could use it, but it would be applied for all users.

    Depending on what your end goal is, you could make the user a Guest account that can't do anything other than the real basics. They wouldn't be able install anything.
      My Computer
    Quote Quote

  5. mfran2002
    Posts : 6
    Win7 Pro x64
       New #23

    unfortunately the policies of my company push to include laptop users (they are the users I'm speaking now) into the Administrators group, but they should also have some restrictions.

    For the other restrictions I'm ok, but for this one I'm struggling....

    I really have no idea how to do...
      My Computer
    Quote Quote

  7. Brink
    Posts : 72,051
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       New #24

    It's hard to restrict an administrator since they have the rights to undo anything.
      My Computer
    Quote Quote

  8. mfran2002
    Posts : 6
    Win7 Pro x64
       New #25

    mmmm...listen...weird workaround:

    if I activate that policy under "computer configuration", it creates me the file:


    C:\Windows\System32\GroupPolicy\Machine\Registry.pol


    then, if I deny the access to that file at the user Administrator? is it an idiot idea or it could work?
    :-/
      My Computer
    Quote Quote

  9. Brink
    Posts : 72,051
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       New #26

    It would work, but as administrator, they could go in an grant themselves access if wanted or if they know how to.
      My Computer
    Quote Quote

  11. imacange
    Posts : 1
    Windows 10 64bit
       New #27

    import/export


    I've been using your tutorial on 10 laptops and it works perfectly.
    Now I need to setup another 20 laptops, is there a way to copy/paste the rules from one laptop to the other?
    When I copy the file it does not take it with the rules that were set.
      My Computer
    Quote Quote

  12. Brink
    Posts : 72,051
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       New #28

    Hello imacange, and welcome to Seven Forums. :)

    You might see if using the method in the tutorial below to backup and restore local group policies may work for this.

    Local Group Policy - Backup and Restore in Windows Tutorial | Windows 8 Help Forums
      My Computer
    Quote Quote

 
Page 3 of 3 FirstFirst 123

  Related Discussions
I created a policy for non-administrators in Microsoft Management Console. However, I couldn't find a policy to restrict user into a specified folder.
Hello there, I have learnt creating policies files from this tutorial.. Now I am facing problem searching and configuring different policies. 1. I dont want 'student' to be able to create files/folder in c: drive. 2. I dont want 'student' to have access to the Internet. Regards.
Hi, I've recently notice a strange username in the user accounts list. The username is hjjmbpdnhvPEZPIXIPO and it's under the administrator's group. Anyone have an idea what this might be? Thanks! Dave
Hello Forum, I have a base image, where I have configured the default profile using the administrator account. I created user ids, but did not log into these ids. I used Local Group Policy to edit the policy of one non administrator ids I created. After sysprepping the computer, and...
I had a network guy come in and he locked a lot of my group policies out. It shows that the Administrator account is locked and disabled. I need to get into this computer and it is urgent. I have tried enabling the administrator account doing net user administrator /active:yes and it said it was...
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 07:59.
Find Us