Hot answers tagged

27

There is a group policy setting to disable access to certain drives, and another to hide access. You need Windows 7 Professional, Ultimate or Enterprise to do this. For other versions, scroll down to my alternate solution. If you only want to apply the policy to certain users, not every user, you need to configure it individually. You cannot do this by just ...


16

The gpedit.msc is basically a front-end for various registry settings. Microsoft published a document called Group Policy Registry Reference which "displays the Group Policy settings in the Administrative Templates folder and the registry entries that they change". You can open the Registry Editor and change the key listed in the table.


13

In Windows Vista and later you can apply policies only to a specific account, but you have to load the group policy object editor from the Microsoft Management Console, not by opening the snapin directly. Open mmc.exe When the MMC console opens, click "File" -> "Add/remove snapin" Select "Group Policy Object Editor" and click the "Add >" button In the ...


11

I was able to get around by going to this location in the registry: HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System Inside, there's a key called Wallpaper. I deleted it and re-set the desktop background, and it worked. You'll have to do that every time you log on though, as group policy refreshes itself. (It can also be set to refresh ...


11

Open the Group Policy editor (Start > Run > gpedit.msc) and navigate to Computer Configuration -> Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Connection Client For value Do not allow passwords to be saved, change to Disabled. When connecting to a machine in Remote Desktop Connector, expand the ...


10

Even if there were a hack, GPO is rechecked and reset regularly and each time you log in. I assume this policy was probably created as an over-reaction to potentially offensive desktop background images. Petitioning your IT org to change this setting and simply rely on people making the right choice or getting talked to by their managers may be a more ...


10

You can't, it's as simple as that.


10

Is your PC, or has your PC ever been on a domain at all, e.g. added to a server domain like in a workplace etc? If not, try going to Start > Run, type in gpedit.msc and press OK. Go to Computer Configuration > Administrative templates > System > Device Installation > Device Installation Restrictions. In here are loads of different settings which apply to ...


9

To disable Lock: Under HKEY_LOCAL_MACHINE\SOFTWARE \Microsoft\Windows\CurrentVersion\Policies\System, create a new DWORD value named DisableLockWorkstation and set value to 1. Then restart the computer.


9

The standard Chrome installation installs to the user profile. It sounds like the administrators at your location have setup AppLocker to restrict launches of programs from the user profile space. To fix this, remove Chrome and download/install the Chrome MSI which correctly places Chrome in the Program Files directory on your PC (download link)


9

Actually found a link (archive.org) that solved this problem: Hit Start –> Run and type "gpedit.msc". Navigate to Local Computer Policy –> Computer Configuration –> Administrative Templates –> System –> Credentials Delegation. Double click the policy "Allow Delegating Default Credentials with NTLM-only Server Authentication". Set the policy to ...


7

Unfortunately not all versions of Windows appear to ship the policies editor. Windows 8 doesn't for example but Windows 8 Pro does, so depending on your version you would be able to use it or not. To see if you can access it press Win+Q to search for it or Win+R to open the "Run" dialog. Either way type gpedit.msc and if it appears in the first case or ...


7

Open Regedit. Backup your registry. Delete the "HKLM\Software\Policies\Microsoft" Key (looks like a folder). Delete the "HKCU\Software\Policies\Microsoft" Key Delete the "HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects" Key. Delete the "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies" Key. Exit the registry and restart. ...


7

If I have correctly understood what you are trying to achieve, you should follow these steps: Open up your "Local Group Policy Editor" by running "gpedit.msc" Navigate to "Security Options" Under the Security Options under the Local Policies, scroll down till you find the "Interactive Logon: Do not display last user name" and then enable that policy. ...


6

I deleted the machine GPO .pol file under c:\windows\system32\GroupPolicy\Machine I had to show hidden files and folders first. I rebooted and it recreated a new local policy. Now domain GPO policies apply without fail.


6

Mark Russinovich has an excellent article on circumventing Group Policy changes. Group policy settings are an integral part of any Windows-based IT environment. If you’re a network administrator you use them to enforce corporate security and desktop management policy, and if you’re a user you’ve almost certainly been frustrated by the limitations imposed ...


6

If the PC is part of a Domain, you cannot change it, otherwise see instructions below. The location of the GPO that controls this would be: Local Computer Policy\User Configuration\Administrative Templates\Control Panel\Display and more specifically; "Hide screen saver tab" Group Policy Editor is only available in W7 Enterprise, Pro and Ultimate You can ...


6

The reason is that you made the change but haven't logged out / logged back in again. When you run id with no arguments, it prints the data inherited from the parent shell, which established the group IDs after it consulted the databases after login. When you run id with a username, it instantly queries the databases to see what that user's group id ...


6

Have a look in group policy, its under user configuration /or computer configuration --> Administrative template --> WIndows components --> Internet Explorer --> Internet Control panel --> Security page There just go to zone that you want to set. Or you can run GP report to see what setting is applied. To do that, open up cmd then type in gpresult /h ...


6

As far as I know there isn't an easy way to revert back to the default settings. You can do the following though: With the Local Group Policy Editor open expand to the following node: Computer Configuration\Administrative Templates\All Settings and sort by the State column. Any policy that is set using that editor will show on top. Repeat the same ...


6

To further eleaborate on what everyone else has said, the "correct" way to do this is through GPO. You may want to look at the package "Group Policy Common Scenarios Using GPMC", it is a set of group policy scripts to lock down workstations for various situations. I believe you are looking for the AppStation script. The GPMC is not used anymore but the ...


6

How can I stop users creating God Mode folders? This can be done using Group Policy settings for "Control Panel". Open "Group Policy" Navigate to the "Control Panel" setting. Windows Server 2008 and above: "User Configuration" > "Policies" > "Administrative Templates" > "Control Panel" Windows Server 2003: "User Configuration" > "Administrative ...


6

You can check the full answer at What is the cause of a high CPU usage of 'system and compressed memory' in Windows 10?. But for a short version: I went to: Start->Control Panel->Administrative Tools->Task Scheduler->Task Scheduler Library->Microsoft->Windows->MemoryDiagnostic There are two line items. Running of the task may be dependent ...


5

As of Windows 10 version 1511, the Windows Store no longer respects this setting unless you have Windows 10 Enterprise. From Darrell Gorter, a Microsoft employee, in this thread: Hello, The group policy for disabling the Windows Store was changed to only work with the Windows 10 Enterprise edition If you only have Windows 10 Pro, you'll need to ...


5

Launching a process when the shutdown was initiated is a bad idea. At this stage the most likely outcome is to get back the error 1115 ERROR_SHUTDOWN_IN_PROGRESS. A much better way is to install a service and register the service to receive shutdown notifications via RegisterServiceCtrlHandlerEx, see shutting down: Service applications receive shutdown ...


5

Kiosk mode for Internet Explorer. Start, point to Run, and then type iexplore -k <web address> When you run Internet Explorer in Kiosk mode, the Internet Explorer title bar, menus, toolbars, and status bar are not displayed and Internet Explorer runs in Full Screen mode. The Windows taskbar is not displayed, but you can switch to other running ...


5

To tell Internet Explorer not to use Compatibility Mode on your site, use the following meta tag (or a variation thereof) in the head section of your site: <meta http-equiv="X-UA-Compatible" content="IE=9; IE=8; IE=EDGE" /> Note that this tag must be the first tag inside the head tag. For more information, visit: Specifying legacy document modes


5

It isn't as pretty as gpedit.msc, but you can download an Excel Spreadsheet that lists all possible group policy settings and their related registry keys. You can then just change the reg key manually. http://www.microsoft.com/downloads/details.aspx?familyid=18C90C80-8B0A-4906-A4F5-FF24CC2030FB&displaylang=en


5

You might take a look at AppLocker which is a new microsoft technology intended to give this type ofcontrol over installing applications. However, it's Windows 7 only.



Only top voted, non community-wiki answers of a minimum length are eligible