Tag Info

Hot answers tagged

21

There is a group policy setting to disable access to certain drives, and another to hide access. You need Windows 7 Professional, Ultimate or Enterprise to do this. For other versions, scroll down to my alternate solution. If you only want to apply the policy to certain users, not every user, you need to configure it individually. You cannot do this by just ...


13

The gpedit.msc is basically a front-end for various registry settings. Microsoft published a document called Group Policy Registry Reference which "displays the Group Policy settings in the Administrative Templates folder and the registry entries that they change". You can open the Registry Editor and change the key listed in the table.


13

In Windows Vista and later you can apply policies only to a specific account, but you have to load the group policy object editor from the Microsoft Management Console, not by opening the snapin directly. Open mmc.exe When the MMC console opens, click "File" -> "Add/remove snapin" Select "Group Policy Object Editor" and click the "Add >" button In the ...


10

You can't, it's as simple as that.


9

Is your PC, or has your PC ever been on a domain at all, e.g. added to a server domain like in a workplace etc? If not, try going to Start > Run, type in gpedit.msc and press OK. Go to Computer Configuration > Administrative templates > System > Device Installation > Device Installation Restrictions. In here are loads of different settings which apply to ...


9

The standard Chrome installation installs to the user profile. It sounds like the administrators at your location have setup AppLocker to restrict launches of programs from the user profile space. To fix this, remove Chrome and download/install the Chrome MSI which correctly places Chrome in the Program Files directory on your PC (download link)


8

Even if there were a hack, GPO is rechecked and reset regularly and each time you log in. I assume this policy was probably created as an over-reaction to potentially offensive desktop background images. Petitioning your IT org to change this setting and simply rely on people making the right choice or getting talked to by their managers may be a more ...


7

To disable Lock: Under HKEY_LOCAL_MACHINE\SOFTWARE \Microsoft\Windows\CurrentVersion\Policies\System, create a new DWORD value named DisableLockWorkstation and set value to 1. Then restart the computer.


7

If I have correctly understood what you are trying to achieve, you should follow these steps: Open up your "Local Group Policy Editor" by running "gpedit.msc" Navigate to "Security Options" Under the Security Options under the Local Policies, scroll down till you find the "Interactive Logon: Do not display last user name" and then enable that policy. ...


6

The reason is that you made the change but haven't logged out / logged back in again. When you run id with no arguments, it prints the data inherited from the parent shell, which established the group IDs after it consulted the databases after login. When you run id with a username, it instantly queries the databases to see what that user's group id ...


6

Open Regedit. Backup your registry. Delete the "HKLM\Software\Policies\Microsoft" Key (looks like a folder). Delete the "HKCU\Software\Policies\Microsoft" Key Delete the "HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects" Key. Delete the "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies" Key. Exit the registry and restart. ...


6

Mark Russinovich has an excellent article on circumventing Group Policy changes. Group policy settings are an integral part of any Windows-based IT environment. If you’re a network administrator you use them to enforce corporate security and desktop management policy, and if you’re a user you’ve almost certainly been frustrated by the limitations imposed ...


6

I deleted the machine GPO .pol file under c:\windows\system32\GroupPolicy\Machine I had to show hidden files and folders first. I rebooted and it recreated a new local policy. Now domain GPO policies apply without fail.


6

Have a look in group policy, its under user configuration /or computer configuration --> Administrative template --> WIndows components --> Internet Explorer --> Internet Control panel --> Security page There just go to zone that you want to set. Or you can run GP report to see what setting is applied. To do that, open up cmd then type in gpresult /h ...


6

Unfortunately not all versions of Windows appear to ship the policies editor. Windows 8 doesn't for example but Windows 8 Pro does, so depending on your version you would be able to use it or not. To see if you can access it press Win+Q to search for it or Win+R to open the "Run" dialog. Either way type gpedit.msc and if it appears in the first case or ...


6

As far as I know there isn't an easy way to revert back to the default settings. You can do the following though: With the Local Group Policy Editor open expand to the following node: Computer Configuration\Administrative Templates\All Settings and sort by the State column. Any policy that is set using that editor will show on top. Repeat the same ...


5

It isn't as pretty as gpedit.msc, but you can download an Excel Spreadsheet that lists all possible group policy settings and their related registry keys. You can then just change the reg key manually. http://www.microsoft.com/downloads/details.aspx?familyid=18C90C80-8B0A-4906-A4F5-FF24CC2030FB&displaylang=en


5

You might take a look at AppLocker which is a new microsoft technology intended to give this type ofcontrol over installing applications. However, it's Windows 7 only.


5

If you are using Windows 2008 as your domain controller you can use Group Policy Preferences->Registry to modify the registry via GP. Otherwise, you'll probably have to write a startup or log-on script (depending on which key(s) in the registry you need to modify) that applies the fix (look into reg.exe for modifying the registry from command batch ...


5

Open the Group Policy editor (Start > Run > gpedit.msc) and navigate to Computer Configuration -> Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Connection Client For value Do not allow passwords to be saved, change to Disabled. When connecting to a machine in Remote Desktop Connector, expand the ...


5

Actually found a link (archive.org) that solved this problem: Hit Start –> Run and type "gpedit.msc". Navigate to Local Computer Policy –> Computer Configuration –> Administrative Templates –> System –> Credentials Delegation. Double click the policy "Allow Delegating Default Credentials with NTLM-only Server Authentication". Set the policy to ...


5

You can use "UserConfig\AdmTempl\Desktop\Active Desktop\Desktop Wallpaper" with a JPG or BMP in your group policies. -Hope this helps


5

If the PC is part of a Domain, you cannot change it, otherwise see instructions below. The location of the GPO that controls this would be: Local Computer Policy\User Configuration\Administrative Templates\Control Panel\Display and more specifically; "Hide screen saver tab" Group Policy Editor is only available in W7 Enterprise, Pro and Ultimate You can ...


5

Kiosk mode for Internet Explorer. Start, point to Run, and then type iexplore -k <web address> When you run Internet Explorer in Kiosk mode, the Internet Explorer title bar, menus, toolbars, and status bar are not displayed and Internet Explorer runs in Full Screen mode. The Windows taskbar is not displayed, but you can switch to other running ...


5

To further eleaborate on what everyone else has said, the "correct" way to do this is through GPO. You may want to look at the package "Group Policy Common Scenarios Using GPMC", it is a set of group policy scripts to lock down workstations for various situations. I believe you are looking for the AppStation script. The GPMC is not used anymore but the ...


5

Launching a process when the shutdown was initiated is a bad idea. At this stage the most likely outcome is to get back the error 1115 ERROR_SHUTDOWN_IN_PROGRESS. A much better way is to install a service and register the service to receive shutdown notifications via RegisterServiceCtrlHandlerEx, see shutting down: Service applications receive shutdown ...


4

You need to set this setting under User Configuration, then apply the GPO to the appropriate OU and security filter it so that it only targets the users you'd like to disable the policy for. For instance, create a Disabled Windows Update user group. Assign all of the user accounts you'd like to disable Automatic Updates to this group. Then, when applying ...


4

How can I stop users creating God Mode folders? This can be done using Group Policy settings for Control Panel. Open Group Policy Navigate to the Control Panel setting. Windows Server 2008 and above: User Configuration -> Policies -> Administrative Templates - > Control Panel Windows Server 2003: User Configuration -> Administrative Templates - > ...


4

Solution : Edit registry to : [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "LegalNoticeText"="Warning this is my message" "LegalNoticeCaption"="My caption" "DisableCAD"=dword:00000001 DisableCAD may not be needed Infos & Debug : Check your different value under : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows ...



Only top voted, non community-wiki answers of a minimum length are eligible