Windows 7 Forums
Join Forum | Login | Today's Posts | Tutorials | Windows 10 Forum | Windows 8 Forum

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Go Back Windows 7 Help Forums Windows 7 help and support Tutorials »


Windows 7: Local Group Policies - Apply to All Users Except Administrators

Page 1 of 2 1 2

Local Group Policies - Apply to All Users Except Administrators

How to Apply Local Group Policies to All Users Except Administrators
Published by Brink
03 Aug 2010
Published by
Brink's Avatar

How to Apply Local Group Policies to All Users Except Administrators


information   Information
This tutorial will show you how to apply Local Group Policies to all users except administrators in Vista, Windows 7, Windows 8, and Windows 10.

You must be logged in as an administrator to be able to do this tutorial.

warning   Warning
The Local Group Policy Editor is only available in:
  • Vista Business, Ultimate, and Enterprise editions.
  • Windows 7 Professional, Ultimate, and Enterprise editions
  • Windows 8/8.1 Pro and Enterprise editions.
  • Windows 10 Pro and Enterprise editions.




Here's How:
1. Open the Start Menu, type mmc.exe in the search box, and press Enter.
NOTE: In Windows 8, you could press Windows+R keys to open the Run dialog, then type mmc.exe, and click/tap on OK instead.

2. If prompted by UAC, then click on Yes (Windows 7/8/10) or Continue (Vista).

3. In the MMC Console window, click on File (Menu bar) and Add/Remove Snap-in. (see screenshot below)
Local Group Policies - Apply to All Users Except Administrators-step1.jpg
4. In the left pane, select Group Policy Object Editor, and click on the Add button. (see screenshot below)
Local Group Policies - Apply to All Users Except Administrators-step2.jpg
5. Click on the Browse button. (see screenshot below)
Local Group Policies - Apply to All Users Except Administrators-step3.jpg
6. Click on the Users tab, select an Non-Administrators, and click on OK. (see screenshot below)
Local Group Policies - Apply to All Users Except Administrators-step4.jpg
7. Click on the Finish button. (see screenshot below)
Local Group Policies - Apply to All Users Except Administrators-step5.jpg
8. Click on OK. (see screenshot below)
Local Group Policies - Apply to All Users Except Administrators-step6.jpg
9. In the MMC Console window, click on File (Menu bar) and Save As. (see screenshot below)
Local Group Policies - Apply to All Users Except Administrators-step8.jpg
10. Select to save to your Desktop, type in a name (ex: Non-Administrators-Group-Policy) that you would like to have for this "all users except administrators" group policy MSC file, then click on the Save button. (see screenshot below)
NOTE: You can use any name you like, but it would make it easier for you to know what user (ex: Test) or group this "specific" group policy MMC console was for later if you included the user or group name.
Local Group Policies - Apply to All Users Except Administrators-step9.jpg
11. Move the MSC file (ex: Non-Administrators-Group-Policy.msc) to where you would to keep it saved at. (see screenshot below)
NOTE: You can also Pin to Taskbar or Pin to Start Menu this MSC file.
Local Group Policies - Apply to All Users Except Administrators-step10.jpg
12. Whenever you open this MSC file (ex: Non-Administrators-Group-Policy.msc), it will only apply group policies to all users except administrators. (see screenshot below)
Local Group Policies - Apply to All Users Except Administrators-step11.jpg
That's it,
Shawn








Related Tutorials
10 Mar 2012   #1
pallipe

Windows 7 Professional 64-bit
4 posts
 
 
Confused about permanence of policy
Hi,
Thanks for the step-by-step, but I am a little confused by step #12:
Whenever you open this MSC file (ex: Non-Administrators-Group-Policy.msc), it will only apply group policies to all users except administrators. (see screenshot below)

I want the Group Policy I created to ALWAYS apply to limited user accounts automatically. How do I make that happen?

Thanks!


My System SpecsSystem Spec
10 Mar 2012   #2
Brink

64-bit Windows 10 Pro
66,589 posts
 
 
Hello Pallipe,


The MSC file that you created doesn't need to be kept running for the policy changes you make in it to remain enforced. The MSC file acts just like your normal Local Group Policy Editor, but will only enforce policies for all user accounts except those in the administrators group instead. If you wanted to make changes to that policy, then you would just need to run the MMC, make the changes you like, and close it. Any changes will be enforced as applied in that MSC file. That's all.
My System SpecsSystem Spec
30 Sep 2013   #3
mq15

Windows 7 Ultimate 32bit
12 posts
 
 
This is a great help indeed. Thanks.

But I am just a beginner in System Administration. I have created .msc file successfully but I don't know how to configure different policies. For example I do not want a student account:
1. to be able to install/unstall a program.
2. to read/write in c:drive
3. access to internet.

I don't know where to find these configuration in the .msc file. Please help.

Regards
My System SpecsSystem Spec
.

01 Oct 2013   #4
Brink

64-bit Windows 10 Pro
66,589 posts
 
 
Hello mq15,

The link below can help you to search and find whatever you need in group policy.
Group Policy Search
If you like for #1, you could use the tutorial below to disable access to "Programs and Features".
Programs and Features - Enable or Disable
If you do #2, then the user will not be able to run Windows since that is on the C drive. They would at least need to have rights to read to be able to function.

It would be best to post a separate thread for #3 to get a variety of options that may work best for you for this.

Hope this helps some.
My System SpecsSystem Spec
01 Oct 2013   #5
mq15

Windows 7 Ultimate 32bit
12 posts
 
 
Thanks a lot Brink.
I would start a separate thread if I could not find. Thanks again.
My System SpecsSystem Spec
01 Oct 2013   #6
Brink

64-bit Windows 10 Pro
66,589 posts
 
 
You're most welcome.
My System SpecsSystem Spec
23 Feb 2014   #7
globaluser

win 7 professional
2 posts
 
 
Hi,

Hi Brink, I have enabled RUN ONLY SPECIFIED APPLICATIONS IN WINDOWS 7 GROUP POLICY , but after this settings has been applied to administrator also, so i'm unable to revert back (unable to open gpedit or regedit ).. can u guys tell to how to revert this back ???

This operation has been cancelled to restrictions in effect on this computer . please contact your system administrator. ( This is the error shown)
My System SpecsSystem Spec
23 Feb 2014   #8
Brink

64-bit Windows 10 Pro
66,589 posts
 
 
Hello Globaluser, and welcome to Seven Forums.

Did you create the MSC for "Non-Administrators" before setting the policy with this MSC?

You could either do a system restore using a restore point created before this, or reset group policy back to default to undo this.
My System SpecsSystem Spec
24 Feb 2014   #9
globaluser

win 7 professional
2 posts
 
 
Awesome Brink
My System SpecsSystem Spec
Reply
Page 1 of 2 1 2

 Local Group Policies - Apply to All Users Except Administrators




« Previous Thread | Next Thread »
Thread Tools




Similar help and support threads
Thread Forum
Group Policy - Apply to a Specific User or Group
How to Apply Local Group Policies to Specific User or Group in Windows Windows has three layers of local GPOs: Local Group Policy Local Group Policy is the only local GPO that allows both computer configuration and user configuration settings to be applied to all users of the computer.... 		Tutorials
How to use local group policy editor to restrict users to Desktop
I created a policy for non-administrators in Microsoft Management Console. However, I couldn't find a policy to restrict user into a specified folder. 		General Discussion
Let us apply a simple local group policy together in Windows 7.
Hello there, I have learnt creating policies files from this tutorial.. Now I am facing problem searching and configuring different policies. 1. I dont want 'student' to be able to create files/folder in c: drive. 2. I dont want 'student' to have access to the Internet. Regards. 		General Discussion
Strange username in Local Users and Group
Hi, I've recently notice a strange username in the user accounts list. The username is hjjmbpdnhvPEZPIXIPO and it's under the administrator's group. Anyone have an idea what this might be? Thanks! Dave 		System Security
Local Group Policies created for user, but sysprep removes settings
Hello Forum, I have a base image, where I have configured the default profile using the administrator account. I created user ids, but did not log into these ids. I used Local Group Policy to edit the policy of one non administrator ids I created. After sysprepping the computer, and... 		Installation & Setup
Network Group Policies Help: Need to add Local User
I had a network guy come in and he locked a lot of my group policies out. It shows that the Administrator account is locked and disabled. I need to get into this computer and it is urgent. I have tried enabling the administrator account doing net user administrator /active:yes and it said it was... 		Network & Sharing


Our Sites
 Site Links
 About Us
 Find Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 08:47.
 Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App