Tag Info

Hot answers tagged

21

There is a group policy setting to disable access to certain drives, and another to hide access. You need Windows 7 Professional, Ultimate or Enterprise to do this. For other versions, scroll down to my alternate solution. If you only want to apply the policy to certain users, not every user, you need to configure it individually. You cannot do this by just ...


12

In Windows Vista and later you can apply policies only to a specific account, but you have to load the group policy object editor from the Microsoft Management Console, not by opening the snapin directly. Open mmc.exe When the MMC console opens, click "File" -> "Add/remove snapin" Select "Group Policy Object Editor" and click the "Add >" button In the ...


10

The gpedit.msc is basically a front-end for various registry settings. Microsoft published a document called Group Policy Registry Reference which "displays the Group Policy settings in the Administrative Templates folder and the registry entries that they change". You can open the Registry Editor and change the key listed in the table.


9

Is your PC, or has your PC ever been on a domain at all, e.g. added to a server domain like in a workplace etc? If not, try going to Start > Run, type in gpedit.msc and press OK. Go to Computer Configuration > Administrative templates > System > Device Installation > Device Installation Restrictions. In here are loads of different settings which apply to ...


9

The standard Chrome installation installs to the user profile. It sounds like the administrators at your location have setup AppLocker to restrict launches of programs from the user profile space. To fix this, remove Chrome and download/install the Chrome MSI which correctly places Chrome in the Program Files directory on your PC (download link)


8

Even if there were a hack, GPO is rechecked and reset regularly and each time you log in. I assume this policy was probably created as an over-reaction to potentially offensive desktop background images. Petitioning your IT org to change this setting and simply rely on people making the right choice or getting talked to by their managers may be a more ...


7

You can't, it's as simple as that.


6

If I have correctly understood what you are trying to achieve, you should follow these steps: Open up your "Local Group Policy Editor" by running "gpedit.msc" Navigate to "Security Options" Under the Security Options under the Local Policies, scroll down till you find the "Interactive Logon: Do not display last user name" and then enable that policy. ...


6

To disable Lock: Under HKEY_LOCAL_MACHINE\SOFTWARE \Microsoft\Windows\CurrentVersion\Policies\System, create a new DWORD value named DisableLockWorkstation and set value to 1. Then restart the computer.


6

The reason is that you made the change but haven't logged out / logged back in again. When you run id with no arguments, it prints the data inherited from the parent shell, which established the group IDs after it consulted the databases after login. When you run id with a username, it instantly queries the databases to see what that user's group id ...


5

Mark Russinovich has an excellent article on circumventing Group Policy changes. Group policy settings are an integral part of any Windows-based IT environment. If you’re a network administrator you use them to enforce corporate security and desktop management policy, and if you’re a user you’ve almost certainly been frustrated by the limitations imposed ...


5

Have a look in group policy, its under user configuration /or computer configuration --> Administrative template --> WIndows components --> Internet Explorer --> Internet Control panel --> Security page There just go to zone that you want to set. Or you can run GP report to see what setting is applied. To do that, open up cmd then type in gpresult /h ...


5

If the PC is part of a Domain, you cannot change it, otherwise see instructions below. The location of the GPO that controls this would be: Local Computer Policy\User Configuration\Administrative Templates\Control Panel\Display and more specifically; "Hide screen saver tab" Group Policy Editor is only available in W7 Enterprise, Pro and Ultimate You can ...


5

As far as I know there isn't an easy way to revert back to the default settings. You can do the following though: With the Local Group Policy Editor open expand to the following node: Computer Configuration\Administrative Templates\All Settings and sort by the State column. Any policy that is set using that editor will show on top. Repeat the same ...


5

It isn't as pretty as gpedit.msc, but you can download an Excel Spreadsheet that lists all possible group policy settings and their related registry keys. You can then just change the reg key manually. http://www.microsoft.com/downloads/details.aspx?familyid=18C90C80-8B0A-4906-A4F5-FF24CC2030FB&displaylang=en


5

You might take a look at AppLocker which is a new microsoft technology intended to give this type ofcontrol over installing applications. However, it's Windows 7 only.


5

If you are using Windows 2008 as your domain controller you can use Group Policy Preferences->Registry to modify the registry via GP. Otherwise, you'll probably have to write a startup or log-on script (depending on which key(s) in the registry you need to modify) that applies the fix (look into reg.exe for modifying the registry from command batch ...


5

I deleted the machine GPO .pol file under c:\windows\system32\GroupPolicy\Machine I had to show hidden files and folders first. I rebooted and it recreated a new local policy. Now domain GPO policies apply without fail.


5

You can use "UserConfig\AdmTempl\Desktop\Active Desktop\Desktop Wallpaper" with a JPG or BMP in your group policies. -Hope this helps


5

To further eleaborate on what everyone else has said, the "correct" way to do this is through GPO. You may want to look at the package "Group Policy Common Scenarios Using GPMC", it is a set of group policy scripts to lock down workstations for various situations. I believe you are looking for the AppStation script. The GPMC is not used anymore but the ...


5

Launching a process when the shutdown was initiated is a bad idea. At this stage the most likely outcome is to get back the error 1115 ERROR_SHUTDOWN_IN_PROGRESS. A much better way is to install a service and register the service to receive shutdown notifications via RegisterServiceCtrlHandlerEx, see shutting down: Service applications receive shutdown ...


4

Open Regedit. Backup your registry. Delete the HKLM\Software\Policies\Microsoft Key (looks like a folder). Delete the HKCU\Software\Policies\Microsoft Key. Delete the HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects Key. Delete the HKCU\Software\Microsoft\Windows\CurrentVersion\Policiess Key. Exit the registry and restart. Note: ...


4

Group policy for the local machine is stored in the registry. The lame approach for modifying it, is via the Command Prompt using the reg command. This is less than practical because it requires absolute knowledge of each and every local policy registry setting, and errors here may be quite disastrous. The tool to use instead is PowerShell, Microsoft's ...


4

There's no way to do it using the console like you've pictured on Windows XP Home Edition. As you've found out, even after installing Group Policy Editor, if it's run on Windows XP Home Edition, Windows Settings will only have Scripts (Startup/Shutdown) unlike the picture shown. To make these changes (and also to apply rights to groups you've created in XP ...


4

In Windows 7, what you're looking for appears to be in the registry key HKLM\Software\Microsoft\Windows\CurrentVersion\policies\system\ Source: http://blogs.technet.com/b/askds/archive/2008/02/08/deploying-legal-notices-to-domain-computers-using-group-policy.aspx This may be different in Windows XP, as I'm seeing on the references on the web to ...


4

Unfortunately not all versions of Windows appear to ship the policies editor. Windows 8 doesn't for example but Windows 8 Pro does, so depending on your version you would be able to use it or not. To see if you can access it press Win+Q to search for it or Win+R to open the "Run" dialog. Either way type gpedit.msc and if it appears in the first case or ...


4

Run gpresult from a command line. and use the /H option to create a html format output. Inspect if you like, and determine which setting and policy you are having problems with. Submit to your support team as needed. If your system is so locked down that you can't run gpresults, then your only option is to complain.


4

Kiosk mode for Internet Explorer. Start, point to Run, and then type iexplore -k <web address> When you run Internet Explorer in Kiosk mode, the Internet Explorer title bar, menus, toolbars, and status bar are not displayed and Internet Explorer runs in Full Screen mode. The Windows taskbar is not displayed, but you can switch to other running ...


4

You need to set this setting under User Configuration, then apply the GPO to the appropriate OU and security filter it so that it only targets the users you'd like to disable the policy for. For instance, create a Disabled Windows Update user group. Assign all of the user accounts you'd like to disable Automatic Updates to this group. Then, when applying ...



Only top voted, non community-wiki answers of a minimum length are eligible