0
votes
1answer
21 views

How to return a GPO to Not Configured?

Recently a new piece of software started being included in our corporate Windows 7 image that, during silent install during the deployment process with Windows Deployment Workbench, sets the Windows ...
0
votes
2answers
32 views

Connect to VPN before Windows 7 starts

I am building a laptop with Windows 7 SP1 x64 which will be used by a remote user. The laptop needs to be locked down so they can only do their work and nothing else. It will have a VPN connection ...
0
votes
0answers
35 views

Windows Login Script ignore UAC

I have a GPO that will launch a Startup Script for a .exe(Install Shield) silent unattended setup. However the user is currently being prompted to allow program due to UAC. I want a true unattended ...
1
vote
0answers
27 views

Applying a local group policy to another user with different username and computer name

A while ago, I setup a dedicated Windows 7 Pro workstation with local group policy applied to a specific guest account. After completion, I made a backup of the applied local group policy setting at ...
0
votes
2answers
44 views

Is it possible to automatically install software when a user logs in through Group Policy?

I am trying to distribute software through group policy, I am able to get this working so that the users can go into Add/Remove Programs and select Install from network and then install the software. ...
0
votes
1answer
79 views

“location is not accessible” “access is denied” on CD-ROM, no GPO

I am a domain admin for my work network, and I have a client (mine), that is not able to access it's CD-ROM (note that USB storage is accessible). I have attempted the following: 1) Verified with ...
0
votes
1answer
39 views

Cache Group Policies for AD Group

I administrate number of Windows 7 machines frozen using Faronics Deep Freeze. Because these machines are kept frozen they do not cache group policies. So every time a user logs in after a reboot ...
0
votes
3answers
58 views

How do I deny local logon but allow it for UAC elevation on Windows 7?

I want to send laptops out in the field, but I do not want them knowing the admin password. So, I will make a local account with admin privelages, but I will allow them to use it only with permission ...
0
votes
0answers
25 views

Starting the Citrix Desktop Service once a specific user logs in

I am working on a package to be released into an enterprise environment which needs to have the Citrix Desktop Service in a suspended state post deployment from CM. In suspending the service post ...
0
votes
1answer
124 views

Active Directory Allow User to Install Only

On my active directory network, I want to satisfy my boss by giving him semi-administrative permissions that will allow him to Install programs as administrator in emergency situations on all ...
1
vote
3answers
50 views

Active Directory - GPO Will Not Apply to Group of Machines

I created a GPO to create a few rules for a set of computers, but no matter what I do, running "gpresult /r" yields "Filtering: Denied (Security)" as admin, or if I'm a regular user, it just doesn't ...
-2
votes
2answers
880 views

client pc install software without administrative rights [closed]

I've a PC installed Win 7 and it is on AD domain network. I can just logon as client user, cannot logon as AD admin or local admin. So i cannot install any software. I've talked to my IT department ...
-3
votes
2answers
57 views

Cannot alter system32 under Windows domain enviroment?

I'm using local admin to login to domain workstation under Windows 7. I want to delete opengl32.dll or replace it, but don't have the permission to do so. The location of file is /system32 Where are ...
0
votes
1answer
77 views

Unwanted mapped drive creation from unknown source

I'm stuck in a situation where I have a network drive being mapped when I log in that I don't want. The drive (X:) is a copy of another drive I do want (W:) which is also mapping. I have no need for ...
0
votes
0answers
271 views

How can I import a security template in Windows 7 using command line?

I would like to remotely deploy some specific change in Security Policies to several computers via remote console (SSH). This is my just exported security template .inf file, extracted according ...
0
votes
2answers
92 views

Is it possible to permanently disable group policy updates on Windows 7?

Is it possible to disable updates to the group policy? I see an option to set an update interval to 45 days - can I disable all updates completely? I want to stop stuff from the corporate network from ...
1
vote
1answer
28 views

Pushing out LGP to many machines without AD

I have a school with 50 Windows machines that I would like to make edits to prevent the kids from changing the wallpapers ect... when they log into a student account. We don't have a Windows Server ...
0
votes
2answers
306 views

'SELECT' is not recognized as an internal or external command

I'm trying to apply a wmi filter to a group policy using this command: Select * from Win32_Processor where AddressWidth = '64' This will only apply the GPO to 64 bit machines (all of our machines ...
-1
votes
1answer
32 views

Forbid files by extension in Windows 7/8

I want to forbid following actions on Windows 7/8: Zip and 7Zip archives to be unpacked/executed , especially when it's a self-extracting archives Exe files to be run dll files Any mentioned ...
2
votes
2answers
247 views

Prohibit computers from showing in 'Network' in Windows Explorer

Can someone tell me how I can prohibit certain users from seeing the whole network in Windows Explorer? We are in an AD based domain with 2003 schema. I need to restrict users from seeing all ...
0
votes
0answers
62 views

How to apply created by mmc .msc file

In widnows 7 Professional, I just have created new .msc file using mmc for specifying user (hiding drives in my computer and disabling Ctrl+alt+del as it was written here: How to hide drive for ...
0
votes
0answers
25 views

Set a couple of permissions for a specific user

I don't know if I worded my question right, if I haven't I apologize. What I would like to achieve is the following for a specific, non-admin user on my computer: Require admin password for ...
4
votes
2answers
239 views

Does Windows 7 re-enable Windows Firewall after removing from domain?

We have the following GPO's configured for our default domain policies: Computer Configuration\Policies\Windows Settings\Security Settings\Windows Firewall with Advanced Security\Domain Profile ...
1
vote
0answers
97 views

I want to be able to have a daily task run showing the times users log on and off

GOAL: I want to be able to have a daily task run showing the times users log on and off ENVIRONMENT: Windows 2008R2 domain ACTIONS SO FAR: I have enabled Account Auditing via: start -> ...
0
votes
1answer
44 views

how to change the default open-with program to a program on the second disk

I have a 250GB HDD for my system and a 60GB SSD using a SATA port. I installed most of my applications on the SSD. There's a strange thing though. I can not change the default open-with program to a ...
0
votes
0answers
45 views

Is it possible for Outdated Infiniband Firmware to prevent Firewall Startup

My general question: Is it feasible for a NIC Firmware to prevent Windows OS Firewall services from successfully loading upon bootup? Explanation of situation: I have been experiencing the darnest ...
0
votes
0answers
106 views

Software Policy Restrictions on one account affects a different account

I have Windows 7 Ultimate 32-bit installed on an SBC, on which I have created an auto-logon account (Standard user), which I am trying to lock down. I have created a Local Group Policy Object (LGPO) ...
0
votes
0answers
139 views

Group Policy settings for the Windows Firewall are sometimes ignored on startup

We deploy our Windows Firewall settings (among other security settings) as local policies to our machines. They are not part of a domain. There is a weekly restart configured for each machine, ...
2
votes
1answer
1k views

Disable “Remember my credentials” on Windows 7 Home Premium

I would like to disable the ability to save network passwords (when connecting to \computer\share) on Windows 7 Home Premium. On Windows XP there was a registry setting to disable the checkbox ...
1
vote
0answers
1k views

Windows 7 Gpupdate failed

I tried to run gpupdate on a local machine but I keep getting the failed error message I have tried following Remove from domain and re-add it again Check the dns setting all correct (Even release ...
0
votes
0answers
223 views

gpresult for local users on local machine?

I would like to list the group policies for local users on a machine I'm setting up. However, when I run gpresult /v /u localmachine\user I get the error that I do have to specify a server name, and ...
4
votes
1answer
863 views

Unable to completely disable Offline Files feature for Windows 7 in GPO

I have been trying to completely disable the offline files feature for all the W7 PCs on the domain that I manage. I have been unable to. I do not want this feature as it creates unwanted, largely ...
-1
votes
1answer
2k views

Does disabling the 'Windows Firewall' service actually work?

When I go the 'Windows Firewall' section of the Windows Control Panel, I'm told "For your security, some settings are managed by your system administrator. If I click 'Turn Windows Firewall on or ...
1
vote
1answer
2k views

How do I find out which programs were blocked by my group policy?

I have to lock down a company computer so that it becomes reasonably difficult to perform anything but the intended tasks with it. As one of the steps, I have restricted the programs that are allowed ...
1
vote
1answer
162 views

Create Local Policy for one Domain User on one PC

Basically I am trying to restrict a specific domain user's actions, such as setting the screensaver, on a windows 7 PC. I've searched round the web only to be confronted with lots of help for ...
0
votes
1answer
221 views

Windows 7: Edit group policy from command line [duplicate]

I'm writing an installer and need to change the All Users' wallpaper. I can do this from the group policy editor GUI, but need to do so from my installer. I can't just edit the registry as it gets ...
2
votes
2answers
1k views

How do I grant a user permission to add local users in Windows 7?

How do I grant a local user account the permission to add other local users in Windows 7 Professional? The important point is, that the local user who should be able to create new accounts must not ...
0
votes
1answer
39 views

Can I use Group Policy or another method to determine which Services startup by User or Group?

We have an application that we use that loads as a service on logon, and I'd like to disable the service from running when an Administrator logs in to their account. I've done some research and ...
0
votes
1answer
503 views

Change desktop background Windows 7

Due to group policies enforced on our systems, we can't change the background of our desktop. The IE's "Set as desktop background" is working, but the change is not permanent. If anyone can tell a ...
1
vote
0answers
42 views

Can I add ADMX files via symbolic links?

Is it possible to add Group Policy templates (ADMX files) on a local Windows 7 machine by creating a symbolic link (soft link) in the C:\Windows\PolicyDefinitions folder that points to an ADMX file ...
2
votes
1answer
71 views

Shared folders and permissions (windows 7)

I am creating a few files for particular users and groups with limited permissions, basically read and execute. So, its works just fine. The problem is that when a user is trying to delete a file ...
5
votes
3answers
4k views

Windows 7 - How to run a script at shutdown but not at logoff

I was wondering if anyone knows how to configure a Windows 7 x64 Enterprise install that is on a domain to run a script if the user attempts to shutdown the computer - but I dont want the script to ...
0
votes
0answers
258 views

Restrict admin shares

My users need local admin rights but I'd like to restrict the admin shares (c$) to domain admins only. I was reading about adding nt authority\interactive to the local administrator group, but i don't ...
0
votes
1answer
949 views

How can I create a bouncing logo screensaver?

I'm looking to create a basic screensaver, background set to a specific color, with a specific image (or images) bouncing around on the computer screen. For reference, the majority of the computers ...
2
votes
1answer
952 views

Mapped Network Drives not available in Citrix application depending on local machine

It's simpler than the title suggests. When I log into a remote application via Citrix XenApp from Box A (Windows XP) and Box B (Windows 7) I can see all local physical disks and locally mapped ...
0
votes
0answers
248 views

Remove Drive Map GPOs that are no longer being applied

I have a Windows 7 64-bit Pro laptop that had some GPOs on it (user and computer) for various things including some drive mappings that the laptop won't be able to access from its normal location. I ...
1
vote
1answer
134 views

Find out what Windows domain policies cause certain restrictions on a workstation

I work within a team of developers in a large bank. We all have full admin rights on our win7 workstations. The Windows infrastructure in our company is getting an overhaul, so there seems to be ...
0
votes
1answer
8k views

How to copy local group policy objects from one machine to another?

I have two Windows 7 Professional desktops. One has a set of local (no Domain Controller) group policy objects imposing restrictions on what programs can be run from that system. I need to copy all ...
0
votes
1answer
2k views

Local group policy logon startup script not executing

This is for Windows 7 I have a .bat and .vbs file in a folder. The .bat runs the .vbs script. In the Local Policy Group editor, under Windows Settings/Scripts I added a reference to the .bat file in ...
0
votes
1answer
6k views

How to block USB port and CD-ROM in Windows 7 through Group Policy?

I want to block USB port and CD-ROM access in my organization through domain (GPM). I have Windows 7 on all the computers in the organization and also have Windows Server 2008. How can I do this? I've ...