Windows Support Forum

Can't find Local Group Policy editor

Q: Can't find Local Group Policy editor

I have been trying to open the Local Group Policy editor as I need to check the "Lock pages in memory" option in order for a PS2 emulator to work.

I can find the file when searching in my computer but when I open it it says it cannot create the MMC span-in. I have tried to add it to the MMC by clicking on file and Add/Remove snap-in, but when that box opens the 'Group Policy Object Editor' doesnt exist on the list of items.

I am really confused and cant work out why it doesnt seem to exist or work on my computer.

I am running Windows 7 Home Premium.

Thanks for your help

Relevancy 100%
Preferred Solution: Can't find Local Group Policy editor

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link (This link will automatically start a download of Reimage that you can save to your computer.)

A: Can't find Local Group Policy editor

Welcome to the forum,

Group Policy editor is not available on home premium.

win7 home final - no gpedit.msc?
Relevancy 100.75%


In all editions of Windows 8, there is the local group policy editor? If so, how do I find it?


A:Find the local group policy editor

Open Run box & type in:


& click OK.

I know it's available in the Pro version.
Relevancy 89.28%

Hi Team,
Please let me know what is the standard Setting for below Security Setting ( Audit Policy ), which are followed in most of the Company.

For Eg:- Should i set ' Success & Failure ' for ' Audit account logon events ' & for ' Audit account management' etc...

Thanks & Regards,
Relevancy 88.04%

Will either of these allow me to restrict drive access to a single user only? I've tried to restrict drive access with Group Policy Editor but it applies the restriction globally--even to me the administrator.

Could anyone let me know if this is possible and how to do it?

Much thanks.

A:Group Policy Editor or Local Security Policy

I take it that you want to restrict access to this drive to everyone but yourself. Which drive are you referring to, is it locally connected or via a network?
Relevancy 85.87%

I have created three user accounts on my computer. Admin, Maint and operator...added the operator account to the group policy snap-in with very restricted policies. Problem is I have somehow associated the Admin and maint as well, how do I reset the local group policy back to default settings? I need to recover the admin capabilities to make changes to the computers.

A:local group policy editor

Hi..JOEYGE... Welcome to SF...Check this link. Hope it helps.

Local Group Policy - Reset to Default
Relevancy 84.94%

I want to disable the default reboot after Windows runs unattended updates as this often prevents my overnight backup from running.

I have tried using the gpedit.msc routine to access the Local Computer Policy Editor but apparently that does not work in Win 7 Home Premium which I have.

Is there a manual way I can disable the reboot function?

A:Can't access Local Group Policy Editor

Hello Franco, and welcome to Seven Forums.

The Windows 7 Home Premium edition doesn't include the Local Group Policy Editor. However, you can use OPTION ONE in the tutorial below to disable the automatic restart for Windows Updates instead.

Windows Update - Enable or Disable Automatic Restart

Hope this helps,
Relevancy 84.94%

Hi, I have a question about the Local Group Policy Editor. I know you can either enable or disable things for all users but is there any way to enable or disable things for only a certain user group (either Standard Users in general or a customized user group created in the Local Users & Groups Editor (lusmgr.exe). For example if I want only a certain user group to be able to lock the computer, in the Local Group Policy Editor I can enable that so no-one can lock the computer but I want admins to be able too etc.

I would love it if someone could answer my question soon

Daniel Callaghan

A:Local Group Policy Editor Question

Secpol.msc / Local Policies / User Rights ? This won't stop them from logging off...
But this will: Start Menu - Enable or Disable Log off
Relevancy 84.94%

Can anyone advise me on how to open the Local Group Policy Editor in Windows 8, because typing GPeditor.msc in the run prompt doesn't work. I've looked online for an answer but wasn't able to find anything helpful. I would like to make a change to the boot time from here, but for the life of me, can't figure out how to get into it. Please help.

Relevancy 84.01%

I have set some access limits on some programs, but the user that has the limits can run the Local Group Policy Editor and change the settings. How do I prevent access by other users to the Local Group Policy Editor?

Thanks for the help.

A:How do I limit access to the Local Group Policy Editor?

Hello Runandnottire, and welcome to Seven Forums.

The only way to do so would be to change their account type from administrator to standard user.

Hope this helps,
Relevancy 84.01%

I want to disable auto run and auto play of my disk drives for security. To do that, I need to access my Local Group Policy.

However, while logged into my regular account, I am unable to access the Local Group Policy Editor via the gpedit.msc file.

I get a "You don't have permission to access this file" error message.

I don't even have the joy of a UAC prompt. : (

I have Win 7 Pro and am the only user and owner of my computer.

Do I have to get into my admin account and change the settings from there?

A:Unable to open Local Group Policy Editor (using Win 7 Pro)

See if these tutorials help:

AutoPlay - Enable or Disable

AutoPlay - Turn On or Off

AutoPlay - Enable or Disable for Non-volume Devices

AutoPlay Shortcut - Create

Autorun.inf Files - Completely Block
Relevancy 83.08%

I created a policy for non-administrators in Microsoft Management Console. However, I couldn't find a policy to restrict user into a specified folder.

A:How to use local group policy editor to restrict users to Desktop

Exactly what are you trying to accomplish?
Relevancy 82.77%

I have logged in as administrator and I am trying to start up the 'Group Policy Editor' using gpedit.msc but Windows 7 can't find it. Is this something that has to be installed or comes inbuilt with Windows 7?

A:Can't find Group Policy Editor

The Home edition does not have access to the Group Policy.
Relevancy 81.53%

I have three Windows 8.1 Pro computers ( not on domain ) One of the three we consider the master and would like to take the User Configuration - Administrative Templates configuration and export it and import it into the other computers. I was wondering
what is the best way about going about how to do this? 
I have tried the following and did not work is this only for Win7 machines?:
1.) Open %systemroot%\system32\grouppolicy\

2.) Within this folder, there are two folders ? ?machine? and ?user?. Copy these to folders to the ?%systemroot%\system32\grouppolicy ? folder on the target machine. All it needs now is a reboot or a ?gpupdate /force?.
Any input would be greatly appreciated. 

Thank you!
Relevancy 93.74%

i would like to know if there is a way to get the group policy editor to work for windows 7 home premium

A:group policy editor

Hello Shark,

Sorry, but no.

Group policy is only available in the Windows 7 Professional, Ultimate, and Enterprise editions. That's one of the reasons why Home Premium is cheaper in price.Local Group Policy Editor - Open
You can still use the registry to set policy instead. You could just post what you needed, and I'm sure we can help like in your other post here for this.

In addition, here's the group policy search page to know what registry settings to use. Group Policy Search
Relevancy 93.74%

iwhen ever i try to open gpedit.msc
it says that it is unavailable.
does windows 10 has any group policy editor

A:group policy editor

Which edition?
Group Policy editor is included in Pro, Enterprise, and higher versions. Not Home.
Relevancy 93.74%


I'm setting up a Windows XP machine with a guest account that has very limited access and that's only for the internet. I've configured the GPEDIT.MSC settings but it also affects the Administrator account as well as the Guest account.

How do I configure GPEDIT.MSC WITHOUT affecting the Administrator account? Thanks!

By the way, this PC is connected directly to the internet and not a company network.
Relevancy 93.74%

On advice of a magazine article I was trying to access 'gpedit.msc' from a start search.
Nothing came up, not even in the admin account.
Anyone know how I can access this ?

A:Where is Group Policy Editor

Hello Rufford,

I'm afraid that the Local Group Policy Editor is not available in the Vista Home Basic edition.

Local Group Policy Editor - Open
Relevancy 93.74%

Hello, All!

I need to lock down a machine for customer use and I decided to use the Group Policy Editor. Well, I found out that whatever I do to lock users down in GPEditor, it locks down my administrators account as well. I thought that it will only affect people who do not have admin priviliges but I was wrong! Here's my question:
How do I lock people down using the Group Policy Editor WITHOUT affecting the administrator's account or any other admin for that matter? Thanks!

A:Group Policy Editor

Try denying administrators read access to C:\WINDOWS\system32\GroupPolicy folder. I have been told by an MCSE that this works but have never tried it. But once you do this, you will not be able to run gpedit until you give the administrators read access again. So you will have to toggle permissions back and forth if you do alot of editing to the group policy files. This is about the only way you could do it on a standalone system. If you have 2000 or 2003 server you could then implement policies based on groups of users.
Relevancy 93.74%

I have windows 8.1 which doesn't come with gpedit installed. I've been able to download it but can't take the next step of actually completing the installation.
Anyone tell me how this is done?
Relevancy 93.74%

This is sort of a branch from a previous post to do with protection a computer that will have public access.

One of the suggestions was to use the Group Policy Editor. I am somewhat inexperienced here and one thing I am not understanding; How do I make the changes (restrictions) apply to just one user (Guest) or a guest-like user and not the Administrator?

Any help is gratefully appreciated.

A:Group Policy Editor

What exactly are you trying to restrict? Program acess? Drive access? Applet access, as in certain areas of Contol Panel or even Control Panel as a whole.

I had a question similar to this not too long ago, but I specifically wanted limited drive access. If that is what you're looking for too, you would restrict the access by way of the drive itself.

Example: Go to Computer, right click the drive you want to edit, click Properties, click the Security Tab, click the Edit button, click the Add button, enter the User Name in the box and click Check Names, then OK. Then you would check Deny for whatever property of the drive that you want that User denied access to. Click Apply, then OK, then you're done.

Reply back with what you're looking to do.

BTW, Group Policy Editor is not included in the Home versions of Windows 7
Relevancy 92.88%

Hello guys!

I need to know how to launch Group Policy Editor. I already know how to launch it via
But thats not working for me. Maybe because i have SSD disk and I have disabled search and indexing.

So hopefully some genius out there might know of a another way of launching group policy editor.

A:How to launch Group Policy Editor

Hi, Welcome to SF,

You could try this

Windows + R would open RUN
Try to Type under Run see whether it brings


Go To C:\Windows\System32\Gpedit

Hope this helps,
Relevancy 92.88%

Does any one know how to find the group policy editor in Vista?


A:Group Policy Editor in Vista

Press winkey + r, type gpedit.msc, press enter.
Relevancy 92.88%

Trying to get rid of the annoying popup in ie9 "Speed up browsing by disabling add-ons", I googled and got a suggestion. Trying to open GPEDIT.MSC and I keep getting MMC could not create the snap in.

This happens with open as administrator and after a reboot. Can someone tell me what's wrong, please?

A:Can't open Group Policy Editor

Group Policy editor is not included in the Windows 7 Home Premium edition.
Relevancy 92.88%

Hey guys I just found a really good site for windows group policy editor. Although the codes are for XP all of them will work in windows 7 I know because I have seen the GPE before and it's basically the same layout.

I will attach the word document with the codes and what they do.

A:Group Policy Editor Jackpot

You will find this interesting:
Group Policy Search

don't know how current the next one is, but I've used the site before:
Download: Group Policy Settings Reference for Windows and Windows Server - Microsoft Download Center - Download Details
Relevancy 91.59%

- Win7 x64

I want to use the group policy editor, but cannot find it anywhere. I tried opening the .exe with the command prompt and finding it in the control panel to no avail. I browsed to the System32 folder and found the group policy folder, as well as the group policy users folder, but bother are empty. Am I doing something wrong here?

A:[SOLVED] Cannot open group policy editor

Type gpedit.msc at the start menu and hit enter.
Relevancy 91.59%

Windows XP won't let me access the Group Policy Editor by typing gpedit.msc into the Run Dialogue. Is there a way to find it in the system files? Or am I out of luck?

A:Solved: Can't access Group Policy Editor

You're out of luck if you have XP Home. No GP in there.
Relevancy 91.59%

hey i just bought a new notebook with vista premieum installed but i am unable to open group editor policy. i do type in search box at start button the sam gpedit.msc but with no result.

also i was able toaccess run but now i can't even find run , for a sec i thought it mightbe accidentally deleted (by my younger brother) but then i don think it could be deleted from system 32. so plz help if u can

Relevancy 91.59%

in window xp pro sp-2 when open GPedit.msc (Group Policy Editor) it's prompt
"your current security settings prohibit running Active X controls on this page.As a result, the page may not display correctly" and after that nothing is working in group policy editor window excluding close and when i click any options in the window it's prompt the same thing "your current security settings prohibit running Active X controls on this page.As a result, the page may not display correctly"
please some buddy help me.........

please help me.

A:I have a problem with my Group Policy Editor please some buddy help me.

only post the same problem once

please read the forum rules
Relevancy 91.59%

I've tried about every method to access Group Policy Editor but it keeps saying snap in restricted by administrator. I've tried using cmd but its disabled by system administrator also regedit.exe so I don't know what to do, would like to know if theres
anything that i can do.  Thanks.
Relevancy 91.59%

I am running Windows 7 Pro and know how to work the group policy. Is there any way I can assign options to a specific group that I created?

A:Group Policy Editor for specific groups

Hello there.
This tutorial should help: How to apply local group policies to a specific user or group.
Relevancy 91.59%

Hello! I am nkraoji
I am using Win-XP Professional SP-2.
While opening the Group Policy Editor by typing "gpedit.msc" in Run dialog box, immediately a small window titling 'Microsoft Management Console' comes up depicting the following error message :
Snap-in failed to initialize:
Name : Group Policy Object Editor
CLSID : {8FC0B734-A0E1-11D1-A7D3-0000F87571E3}

When I click 'OK', the same error message is repeated in the Group Policy Editor main window.
Can any of my fellow members will guide me to solve this problem?
Thank U.

A:Problem while opening Group Policy Editor

Known problem caused by path variables, to fix try:

Right-click My Computer>Properties>Advanced>Environment Variables>System Variables>Path

In here type (as in add to existing ones, don't overwrite them)


Confirm and okay out of it, you may need to restart but that should be it. If there is a problem though let us know
Relevancy 90.73%

Hey everyone I've been having a bit of an issue with GPE gpedit msc It doesn't seem to break anything important so far but it's just something annoying I've ran into when editing certain policies most notably Autoplay Basically whenever I open gpedit msc it will give an error or two saying it has encountered an error Policy Editor Group (gpedit.msc) Error Parsing while parsing Translated it says something like this Can't find resource ' string SiteDiscoveryEnableWMI ' referenced in attribute displayName File C Windows PolicyDefinitions inetres admx rule column I think it's worth mentioning that my Windows installation was Sysprepped when I received my new motherboard and CPU and I suspect that having broken more than I'd have wished for This was months ago by the way I'd format the C drive and install Windows but I Group Policy Editor (gpedit.msc) Parsing Error want to hold off on that for a while I'm essentially keeping my current installation Group Policy Editor (gpedit.msc) Parsing Error together with duct tape so to say Here's an image of what I mean It's in dutch This together with boot times of around and a half minutes This includes logging in and the time it takes until I can really use Windows makes me feel a little disappointed of the performance I'm sure I'm not infected with anything nasty I generally keep a safe system and run Norton AV MBAM Premium MBAE and I have a couple of custom firewall rules I also use Firefox with Adblock Plus and NoScript I really suspect the sysprep and my somewhat chaotic habits of installing removing games from Steam are to blame I'm wondering if any of you have any ideas of how to improve performance and fix certain issues I'm having I've kinda ran out of ideas myself which is why I turn to the forums If there's anyone who's willing to help and think with me that'd be great

A:Group Policy Editor (gpedit.msc) Parsing Error

hello ! i had the same problem, 
i uninstalled the windows update KB3087038 and now it's better
Relevancy 89.87%

Running Win7x64 SP1 Pro
Just upgraded to IE11 from IE9
The browser seems to be working OK, but

When I open the Group Policy Editor it says:
Encountered an error while parsing.

Resource $(string.Advanced_EnableSSLFallback)
referenced in attribute displayName could not be found.

File C:\windows\PolicyDefinition\inetres.admx, line795, column 308.

And there is no longer any settings for Internet Explorer under the User Configuration > Administrative Templates > Windows Components as there were with IE9.

A search says something about two files inetres.admx and inetres.adml .

Anybody have a solution to this problem?
Relevancy 89.87%

I am running Windows 7 Home Premium and want to change something found in:

Group Policy Editor>Computer Configuration> AdministrativeTemplates> Windows Components

Is there a workaround?

A:Group Policy Editor workaround Windows 7 Home Premium 64 bit

Hello Phil,

What did you want to change there?

You could look it up at the link below to see what to change in the registry for it instead.

Group Policy Search

Hope this helps for now,
Relevancy 88.58%

I am unsure where to report bugs so I'm mentioning one here. If there is a more appropriate forum then feel free to point me that direction.
EMET 5.5 beta on Windows 10 64 bit will fail to load on reboot after an install if group policy editor has been used to aggressively remove "features" from Windows. One notable problem is disabling Cortana in group policy editor. EMET on my box
really doesn't like that. This is unfortunate as I don't expect Cortana will ever be enabled on any of the boxes I oversee.
Relevancy 88.58%

I build an XP SP pc with all critical updates with an anti-virus and a Time Policy - Down Clocks To XP Windows SP2 Create Locked Editor - Group remote software I use IE to access a particular url so that an employee can clock in or out I start IE automatically with a process that checks to see if IE is running and if not runs a shortcut to reopen IE in kiosk mode and to the appropriate url I deny right click usage control panel run etc through the registry I am hoping to do this through a local group policy Group Policy Editor - Windows XP SP2 - To Create Locked Down Time Clocks that I can have the Active Directory administrator import into an OU so I do not have to lock Group Policy Editor - Windows XP SP2 - To Create Locked Down Time Clocks down every time clock I build manually I am not familiar with Group Policy Editor so if you tell me to create a GPO that sets IE's proxy server setting Group Policy Editor - Windows XP SP2 - To Create Locked Down Time Clocks to a non-existent server I know what you are saying but I don't know how to do that I appreciate any advice anyone might have for me
Relevancy 87.72%

Pls help !!! Need to change the value of  computer configuration>system>removable Storage Access>All removable storage classes:deny all access      from not configured to enabled

using cmd or power shell ??
Relevancy 86.86%

So In all my searching I can't really find a workaround for this. I have a domain and plenty of domain users but I have one department that remains local user accounts. All I want to do is set the default homepage for these 47 domain connected machines.
So with domain users I can use loopback policy to apply the user gpo settings to any computer in those specific OU's.  But that simply will not apply to local accounts.  Any other thoughts on how to make this work centrally?  Not super interested
in doing one by one.
thanks in advance.

Edit: I did try pushing a registry setting via the computer config but doesn't seem to be taking.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
?Start Page?=?http?
Relevancy 86.86%

do u know how to configure group policy so once user logs in,he can be assigned local administrator rights.

I wants the moment user logs in a new computer in a domain,in their user configuration
they will automatically assigned local administrator rights rather than I am using contol panel to add manually.
Relevancy 86.86%

I have a large network of about 500 machines on a domain. I have set up a local account for exams, with a special local Group Policy that is for non-administrators. The group policy restricts almost everything apart from a few applications.

I need to copy this GP over to another 20-30 machines. Is there any way i can do this.

Copying %systemroot%\system32\grouppolicy didn't work.

A:How to copy local Group Policy?

Welcome to Sevenforums theslowminded!

After you copied the policy over, did you force the update?

gpupdate /force
Relevancy 86.86%

Hello, I'm using window 7 home. So i dont have local group policy. I want to stop user other than "admin" myself to enter control panel. Anyone know to do it manually? I know there is a way to do it manually with regedit at user setting but not sure how. Or is there any software that does the same thing as local group policy of pro--enterprise edition of window 7?

A:Window 7 local group policy

slight cheating way around it i suppose, go to windows secrets control panel custom etc etc etc
Relevancy 86.86%

I've an WinXP SP2 box that I locked down using the Local Group Policy MMC but I need to know if I can selectively lock down accounts manner. I'd like to lock down all the accounts save the local admin account. Thanks in advance!
Relevancy 86.86%

Hi, I have a local group policy on Vista x64 that is not running. This script runs fine on every other OS. W2K > Win7 (including x64 machines) It is a machine policy and it will not run. It is a script that runs bginfo from the Program Files folder. Any ideas? Thanks

A:Local Group Policy Not Running


What version of Vista is this? Is it Home Premium, Home Basic, Business Basic, Business Premium or Ultimate (or other)?

Go into Services, and check for the "Group Policy Client" service. You cannot (easily) stop this service, but make sure it is there and running.

Relevancy 86.86%

Computer = Windows XP SP2

Trying to set up so that the Local Computer Policy states that any remote session that is logged onto this computer will kick off a user that is idle (no activity) for 15 minutes. Right now I have this setting (Set a time limit for active but idle Terminal Services sessions) enabled and set for 15 minutes but its not kicking a idle user off after the set time.
It looks like this setting is just disconnecting the user, compared to logging them completly off - which is what we want. So I tried enabling Terminate session when time limits are reached. Still no luck with that either. Any ideas?


A:Group Policy Editor - Set a time limit for active but idle Terminal Services sessions

Possibly -> Session Time Limits
Relevancy 86%

Here's my situation. I've got a computer that's shared by several people (in a small church library), which I'm trying to lock down in a controlled fashion.

The system is running Windows XP Professional. In addition to the administrator account, I've created one restricted account for the librarian, which is password-protected, and one restricted account with no password for everybody else. It's a stand-alone computer -- no domain, no domain controllers, no active directory.

I've successfully implemented a local group policy which prevents users from doing things like changing screen resolution, screen saver settings, etc. But I'd like to have this restriction apply only to the one "everybody" account, and not to the other accounts, and I haven't been able to figure out how to do this. Is it possible? What are the steps involved?


A:Local group policy -- how to select users?

Hello, Tom, and welcome to TSF. If the "open to everyone" account is used by really numerous individuals, of varying levels of IT competence, then I would strongly suggest you take some time and have a look at a utility provided gratis by Microsoft, the Shared Computer Toolkit for Windows XP. Invest some time to browse all the area I've linked for you, and please post back if you really think this is what will effectively help you keep this computer under your control, your way, all the time.
Relevancy 86%

Hi !

Windows 7 group policy

I've read a lot of post on this topic but haven't been able to find a clear answer to this question.

Is it possible to create different policies on a local machine and somehow assign these policies to the groups logging in on this machine ? Seems to me that changing the group ploicy affects all users.

The machine is not on a network. It is a computer for test purposes in the field not having a domain server to handle the group policies.

Kind regards

A:Group policy on local machine not on network

Quote: Originally Posted by kahr

Hi !

Windows 7 group policy

I've read a lot of post on this topic but haven't been able to find a clear answer to this question.

Is it possible to create different policies on a local machine and somehow assign these policies to the groups logging in on this machine ? Seems to me that changing the group ploicy affects all users.

The machine is not on a network. It is a computer for test purposes in the field not having a domain server to handle the group policies.

Kind regards

Gpedit does change group policies, and all users in that group are affected. I am a little confused as to what you want to do to the users.
Relevancy 86%

Not long ago Soul Invictus loaded winXPpro on the Group Settings Policy Security Local & PC and confronted an issue Thats really not surprising Issues exist using this the latest amp greatest OS in wide distribution world-wide It was developed upon previous versions so it really shouldn t come as a big surprise what it does amp to some extent how it does it Yet it still exists with functionality barely defined to the novice user IMHO I have Local Security Settings & Group Policy XP Professional and I m getting my bearings on the differences between this version and another XP version I notice this one has a Windows Firewall My problem is that I used to be able to access my employer s company intranet from home When I go to the site and enter my login info I get the message Access Denied policy denied Your system policy has denied access to the requested URL For assistance contact your network support team I m thinking I have to modify a setting in gpedit msc however I can t be sure Any thoughts of what security setting that needs to be modified My thoughts are Policy information in winXPpro is kinda confusing Like many I am the network support team in my household My thoughts are quot What should I do when contemplating changing a setting quot Any changes might best be done knowing first what the default settings are and where to find them and how to interpret the information available on the OS about these settings So I navigated to the quot group policies quot that typing gpedit msc in the quot run quot will deliver To the best of my knowledge all settings are at the default setting Before doing this I also navigated to a section I typically use to find quot Security Policies quot It is among what are considered quot administrative tools quot and accessed slightly differently The quot administrative tools quot panel includes shortcuts to Component ServicesComputer ManagementData Sources ODBC Event ViewerLocal Security PoliciesPerformanceServicesFirst let s try start-- run-- gpedit msc Here we find two basic directories with main folders each Opening them up reveals the organizational tree we get used to seeing in a Windows OS and elsewhere That appears to me to be large A cornerstone of understanding it might be to see what all users share in having this feature Windows XP Pro tends to strike one as an operating system designed to accomodate users within a range from single user to large corporation users For this reason I think it is desireable to quot filter out quot that which is unnecessary for the simpler user amp understand what should be done as one advances in the complexities of use Bearing in mind security issues at some risk of having a bucket of water thrown at me and hearing quot just stay with the defaults if ya know whats good for ya quot To see it from a different angle we ll select start-- control panel-- performance amp maintenance-- administrative tools -- local security settings Five directories are here and moving down the tree opening each folder as we go Account Policies-- Password Policies Account Policies-- Account Lockout Policies Local Policies-- Audit Policiesclick for image Local Policies-- User Rights Assignmentsimageimage Local Policies-- Security optionsimageimageimageand backing up to capture the lost type imageimage Public Key Policies-- Encrypting File Systemimage Software Restriction Policiesimage IP Security Policies on Local Computerimageand once again backing up to capture the type that extends past the limit of a screenshot imageWhere we quot backed up to capture the lost type quot was the entry Network access Remotely accessible registry paths of security options If you right-click on this entry or any entry you will get more details by selecting quot properties quot Here we see why the entry is so long registry paths are involved imageWhat does this all mean I don t know By having it visible I do know that it is not invisible Perhaps we can reference to it as we learn huh Hun... Read more
Relevancy 86%

Hello everyone,

I am slowly working my way through Scott Muellers Comptia A+ Cert guide and currently learning about security fundmentals. I have a test rig running XP Pro service pack three.

However when I wanted to go into local group policy to hide specified drives on that computer (as an experiment) I couldn't see anything listed under windows components except media player.

I followed the same route as you would on windows 7, User config-administrative templates-windows components, but there is nothing there. By the way my test rig is not connected to any networks at all.

What did I miss?!


A:Query about local group policy settings in XP Pro

We are not here to help you with your homework. How would you learn if we told you? This thread is now closed.
Relevancy 86%

Hi all I am currently locking down a PC for a client of mine PC is used as a Local Group Policy Pro) question (WinXP DMZ used by the public only to access the internet PC Local Group Policy question (WinXP Pro) runs Windows XP Pro SP While configuring the Local Group Policy through gpedit msc or through mmc Local Group Policy question (WinXP Pro) - add remove snap-in I realised that while applying policies at the quot User quot level the administrator account also inherits these policies Sames goes if applied at the quot Computer quot level but that goes without saying Luckily I was not applying them directly to the PC in question rather applying local policies through a VMware session on my laptop just in case something like this happened My question is how can I apply strong Local Group Policies on a PC WITHOUT the administrator account inheriting them I tried setting quot Deny quot permissions on the C WINDOWS System GroupPolicy folder but to make changes to GPO s you need access to this folder I did work though I should also say that this PC is not joined to the Domain and is on a separate subnet to all other PC s Any help would be apreciated Cheers nbsp

A:Local Group Policy question (WinXP Pro)

This is a very knowledgeable site BUT, if you receive no answer here, these people are very often quite helpful with Network stuff;

Relevancy 86%

Hey all, stuck against a bit of a wall, here. I have a bunch of vista computers and I need them to automatically map a network drive whenever the user logs in.

In the past, we've used a login script and a .bat file to create the shares. But we're getting ready to switch over to vista, but the login script doesn't work under vista.

I've heard that its better to use Group Policy for this, but I cannot figure out how to do it using LOCAL GROUP POLICY. I've found about 100 or so guides for doing it using active directory/serverside things, but we're not on active directory, so that's not an option.

I'm sure there is a policy somewhere, can anyone direct me to it?

A:Local Group Policy to map a network drive?

When you map a drive on the workstation, and put a check in the box Reconnect on Logon (sign-in) it will reconnect every time.
Relevancy 86%

Hi to all,

when i open Local group policy but not open properly and show message fail to open Local group policy on this computer..........

how to solved this error........ Please Help me!!!

A:fail to open Local group policy

hi and welcome..

Make sure you run as administrator for permission.
Relevancy 85.14%


Does anyone know how to exclude a user from accessing anything on
a local computer , but still be able to use a shared program from that
machine? IE. not be able to see the computer or folder through
my network places or through computer management "shares" folder
or be able to change any settings on the aformentioned machine?
Basically, I want to share a program but not have that user have the
ability to change anything on this "server". It is a peer to peer setup
with XP pro running on all machines. I have tried everything from
sharing and security - but it is my understanding that a Group Policy /
Local Policy should be setup for this machine which would prevent access?

Any help would be greatly appreciated.

graham neil

A:Local Group Policy - program excusions for users

How are they going to access it if you take away all the permissions from accessing? I see your quandary. Not sure how you are going to give them permissions to use something that you don't want them to use.

You can deny them local login access to the machine but if they need access to something over the network they have to see it to be able to use it.
Relevancy 85.14%

Trying to restrict non-admin users from seeing a lot of programs under the Start Menu. Already using the GPO for non-admin users and I'm hoping there is an area I can achieve the above. So the idea is admin account sees all the programs as normal, non-admin user restricted to only seeing a few programs on the Start menu. Can I achieve this through local group policy and if so where


A:Local group policy start menu programs

If this is for a home, then it would be simpler to move the shortcuts from all users start menu* to the admin profile(s)**. However, hiding the shortcuts by moving them or via GPO (if there is a way to do that) would not stop users from starting the program via the Windows (file) Explorer.

GPO can restrict a user from running a program. In theory, this should work no matter how the user attempts to run the forbidden program. In reality, they are ways to start some programs restricted by GPO. That is why I wondered if this is for a home - then we might be talking about adults vs. children.

*C:\ProgramData\Microsoft\Windows\Start Menu\

**C:\Users\username\AppData\Roaming\Microsoft\Windows\Start Menu
Relevancy 85.14%

I recently locked down a PC's with LGP. It is heavily restricted for public use.

One strange problem that has cropped up is the Flash player in Firefox.

I didn't install the plug-in before I locked down the user account.
Afterwards I realized I hadn?t installed it so I logged on to the Admin account and installed the plug.
The player now works fine when logged in as Admin or as a User with full privileges but won?t play in my locked down user account, where I still get a message saying the plug-in is not installed.

Any ideas what?s going on here or what I might have done in LGP?

A:Local Group Policy and Firefox plugins (Flash)

It doesn't work because the LGP is in effect. Since you added Flash after enabling LGP it makes sense. Just like what you wanted. Say you don't want Flash on the computer for security reasons, but someone tries to install it. It won't work. You need admin account to use it. If you want Flash and LGP you need to undo the LGP, install Flash, and then re-enable LGP.
Relevancy 85.14%

Hello there,

I have learnt creating policies files from this tutorial.. Now I am facing problem searching and configuring different policies.
1. I dont want 'student' to be able to create files/folder in c: drive.
2. I dont want 'student' to have access to the Internet.


A:Let us apply a simple local group policy together in Windows 7.

right click C: drive. select share with / advanced permissions / select advanced sharing and remove student from the list.
Relevancy 85.14%


I'm not sure where to post this as it's not really a network issue due to the computers not being domained.

At the moment I am applying local group policy settings for each computer (many computers) manually on each machine (Taking about 20 minutes per machine due to the MANY settings that need checking).

Is there any way I can cut this time down by saving a set of policy options from one computer and applying that set to multiple other computers (via a usb stick etc?)

Thanks in advance,


A:Automating Local Group Policy on non-domain machines?

Hi and welcome to TSF not quite sure but you may find something here Group Policy management for IT pros
Relevancy 84.28%

Dear forum readers,

I know it's possible to configure Wireless settings by policy. However it seems absent from the local group policy, which is where I would like to put it.

How can I do ? Maybe it would work if I copy the corresponding "Wireless Network (IEEE 802.11) Policies" section from a non-local policy template, then import in my local group policy ? I would need such a template though, since I don't know how it looks like.

I'm speaking of the security templates here (the inf files), not the admx files which I have already since I have W10 Pro...
Relevancy 84.28%

I was setting up local group policies on a laptop so I could apply them to non-admin accounts. Well I goofed and accidentally applied the policies to all users including the admin. The problem is I was restricting access to all programs except a certain few like internet explorer, remote desktop, etc as users will only need to access their webmail and remote desktop to access the terminal server. Now I cannot do anything with the admin profile because the policy was applied to my account as well. What can I do??

A:Accidentally applied local group policy to all user groups

Which Administrator account did you apply this to? The default or did you enable the built-in Administrator account and apply it to that also?

If you didn't go through any steps to activate an admin account previously, you could probably enable the built-in one and change the settings for the normal Administrator account.

Built-in Administrator Account - Enable or Disable
Relevancy 84.28%

I was playing around with local group policy with smart card settings, and I checked "Force smart card login". I never set up smart card certificates to be used, and don't have any smart cards for it to work with. I need to login to the computer, but when I try, it says "You must insert a smart card to login". I am using the local administrator account, and tried a few ways to bypass it including;
safe mode
disabling smart card in BIOS
remote desktop

When I go home, I will try using ERD commander, and windows recovery console to stop the smart card service. BTW I am using TinyXP rev.05

Relevancy 84.28%

when i log in my pc on network then it change my local adm password.How i can disable help me.

A:How to disable local administrator password change group policy

I'm not sure what you mean. Simply logging onto your PC shouldn't change the admin password. It is also recommended to not use the Admin account for general use.
Relevancy 83.42%

I'm creating a local group policy to lock down a Win7 Pro Workstation for use in the Staff room.
It's the first time I've used it, previously I've worked a bit with AD. but I've been following on line tutorials and using google and I'm nearly there with it.
But I'm stuck on one thing. My approach has been to remove access to pretty much everything apart from IE, Firefox and Skype icons on the task bar.
I've got the start menu empty apart from the shutdown button, which is what I want but at the top of the start menu is the users icon/picture thing and if i click on it it takes me to "user accounts". I can't for the life of me work out how to get rid of the picture or just stop this happening.

Can anyone help please?

A:How to use Local Group policy to prevent access to User Account settin

Have you tried anything from this thread (especially second page)?
Relevancy 83.42%

I am working with Group Policy after Firewall Rules not defined Local applied in reboot a Windows Embedded system that Firewall Rules defined in Local Group Policy not applied after reboot is in a workgroup not on a domain The firewall rules are specified Firewall Rules defined in Local Group Policy not applied after reboot in the Local Group Policy Much of the system has been locked down according to DoD standards The first time the system identifies a local private network all firewall rules are applied as expected After a reboot only firewalls specified in local settings the MMC snapin are applied as seen through the Advanced Firewall Monitoring in the MMC snapin Firewall Rules defined in Local Group Policy not applied after reboot I can run quot gpupdate force quot to re-apply the rules However the firewall reverts to local rules after the next reboot nbsp The local group policy is configured to not allow local rules The behavior with this set seems to be opposite of expectations local is merged GPO rules are not but changing this does not change the outcome I've reviewed all of the Windows event logs that I know to be applicable and find little to go on Any help would be appreciated
Relevancy 82.99%

Hi all,
I received this message when i tried to look at the local group policy setting on one of my machines (Windows XP SP3), which is joined in my domain.
"Failed to open group policy object on this computer. You may not have appropriate rights.
Unspecified error."
note that I am local admin.
It's all started when I was troublshooting WSUS connectivity and i looked at the WinsdowsUpdate.log, the WSUS server was <Null> & WSUS status server <Null>, I tried to force the domain GP by using GPupdate /force, it went fine and asked to
log off, but nothing changed in the WindowsUpdate.log still <Null>. Then i tried to look at the local policy setting.
I searched the internet nothing related to my case.
Thanks in advance for advising.
Mohammed Adel

A:Group policy error: Failed to open group policy object on this computer.

I guess reinstall windows is the solution, I also found one log "event id 1096", related to "registry.pol" it was corrupted.
Mohammed Adel
Relevancy 82.56%

I want to use Local Group Policy Editor to apply group policy to a specific custom security group created using local users
and groups snapin for MMC.
Is this possible and if so how?

If not, than what is the purpose of being to add local security groups.

Custom groups do not appear to show up in the list of users compatible with local group policy. 

Software/Hardware used:
Windows 8
Relevancy 82.56%

I need to set block inheritance on a local user's machine for local set it on for 20 Override screensaver or to policy minutes and timeout more group machine domain the screen saver from the domain level Override domain group policy for screensaver timeout and set it on local machine to 20 minutes or more Here's what we have On the domain controller we have a Group Policy Object Override domain group policy for screensaver timeout and set it on local machine to 20 minutes or more set to automatically set the user's Desktop to Screen saver after minutes seconds of inactivity My boss has tasked me with being able to override this Group Policy on a local user's machine and set the screen saver to turn on after minutes or more since the user continually has to log back in and get's whatever session he had going cut off and has to log back into that site as well nbsp My question is this Where in the local machine's Local User Policy would I create this policy Desired outcome Override Group Policy from the domain set local user policy for screen saver timeout to seconds Please provide me as detailed a response as possible as where to go in Local User Policy and how to create this Thank you Chris

A:Override domain group policy for screensaver timeout and set it on local machine to 20 minutes or more

We cannot override domain policy via local policy, processing of multiple domain-linked GPOs is in the order specified by the administrator, on the Linked Group Policy Objects tab for the domain in GPMC. The GPO with the lowest link order is processed last,
and therefore has the highest precedence.Alex Zhao
TechNet Community Support
Relevancy 82.56%

This is a repost from another forum I was directed here nbsp I have seen all the answers regarding this already (repost LOSES GENERALIZE SETTINGS POLICY SYSPREP other from forum) LOCAL GROUP Still having fits there has to be a way to do this SYSPREP GENERALIZE LOSES LOCAL GROUP POLICY SETTINGS nbsp nbsp nbsp nbsp nbsp nbsp nbsp I have a laptop in which I've created an image I want to nbsp deploy nbsp The image has VERY specific group policy settings to restrict the user from doing anything improper on nbsp the desktop nbsp I have created SYSPREP GENERALIZE LOSES LOCAL GROUP POLICY SETTINGS (repost from other forum) users and assinged the LGP to SYSPREP GENERALIZE LOSES LOCAL GROUP POLICY SETTINGS (repost from other forum) a specific user nbsp It works fine BUT when I sysprep it and do the generalize pass all the LGP goes away nbsp I have an unattend file for win that I've created using the SIM program nbsp I use it to handle the OOBE stuff Bottom line I have an nbsp image that I want to clone using the MS tools IMAGEX to create a WIM and then deploy it to laptops as a WIM image nbsp I need to figure nbsp out a way to clone this laptop and keep nbsp all the settings and let MS WIN be happy with the SID's and computername nbsp I could do this in WINXP and WDS easily nbsp But WIN is a little more difficult the LGP is used to lockdown the laptop nbsp These laptops are for police and fire so I want them to boot to a user autologin and then allow them to login to the dispatch application nbsp It works with no porblems until I sysprep nbsp it for deployment Anyone have any ideas my thoughs are no because the LGP is tied to a local user' SID nbsp and when sysprep nbsp is done the SID is invalid and before anyone asks yes I have copied the pol nbsp files and tried a GPUPDATE FORCE to get it to work no luck Warren Harris City of Dallas Mobile Technology Center thread continues Some useful info on the links thanks but I am still not getting any closer to a solution Since I am using the MMC snap-in to create the local user settings nbsp nbsp Example my MMC with the plug in for group policy says USERS FIRE nbsp FIRE is the local user that I want to restrict nbsp I set the policies not using GPEDIT MSC but the MMC snap-in nbsp I see the GroupPolicyUsers folder try to copy that pol file from the folder of a working machine to the master machine nbsp Do a GPUPDATE force it says it's completed but after reboot and logging in as FIRE no change I dont use the GPEDIT MSC since that is really for all users I have another local user that is called MTC nbsp I use that to login to the laptop for admin purposes nbsp I dont want the restrictions to be in place for the MTC user FIRE is the only user with restrictions We do this for CJIS compliance the FIRE user cant do anything on the desktop can't save files can't put in USB drives We really lock them down We were using the Shared Computer Toolkit in XP to make this happen but it dont work on WIN All lockdowns are group policy SO I'm stumped everything I've been able to read tells me I'm doing the right things Is there perhaps nbsp another way to approcah this under win I want to clone a box with all of the restrictions on it join a domain and autologin a user Most of the stuff I can take care of with unattend xml BUT I CANT GET THE RESTRICTIONS TO WORK


Based on my research, we can configure local Group Policy Administrative Template settings on a master computer. This is because Administrative Template settings are stored in the registry, and Sysprep does not change this part of the registry. Any changes
you make to Administrative Template settings will appear on the disk image.
And the sysprep does not remove the user specific GP. It is still under ?c:\windows\system32\Group Policy Users". As you said, the user SID changed during sysprep. Try to change the name of the policy folder in the "c:\windows\system32\Group Policy Users"
folder to match the users new SID.
And then run GPUPDATE / FORCE, restart again.
Regards,Ada Liu
TechNet Community Support
Relevancy 81.7%

How to disable from installing software using gpedit.msc?

User Account is Administrator.

I want to block different kinds of software.

Internet Download Manager

And also if the software was already installed like Google Chrome.

What will happen if chrome is updating? will the update be successful? even in group policy is restricted to install?
Thanks in advance.

A:Group Policy Editor "Disable Software Install"

Editing the Local Group Policy to block people from installing software is a little extreme in my opinion. It can certainly be done but it might just be easier to create another user account that is a standard user account and have everybody use that. If they try to install something, they will need admin permissions to do so.

Just my 2 cents.
Relevancy 80.41%

I have Windows XP Pro, SP2.

In Windows 98 I knew the name of the file that was the Policy Editor but I've searched and thought and I can't come up with the name of the file that is the Policy Editor or Group Policy Editor in XP. I know there is one because in Tweak UI, you can go into About>Policy>Run Group Policy Editor. And it runs. Can somebody please tell me the name and location of that file?



A:What is the name of the file that is the "Group Policy Editor" in XP

Relevancy 79.98%

I m trying to get rid of the pop-up that Internet Explorer gives that tells me that I can speed up my browsing by disabling add-ons All the googling I ve done tells in Can't performance add-on notifications" settings "Disable Policy find Group me to run gpedit msc and go to Administrative Templates Windows Components Internet Explorer and enable quot Disable add-on performance notifications quot I ve run gpedit msc and searched through the options and no-where Can't find "Disable add-on performance notifications" in Group Policy settings can I find quot Disable add-on performance notifications quot The only option that mentions add-ons is quot Do not allow users to enable or disable add-ons quot I ve opened that up just in case the option I want is hidden within that but it doesn t seem to be Can anyone tell me where to find this option or if it could be called something else I run Windows home premium I followed some instructions I found on the net to enable gpedit msc as it is generally only available on Windows Professional and Internet Explorer

A:Can't find "Disable add-on performance notifications" in Group Policy settings

DownloadAddons fixLaunch it,click YESRestart the PC and see if that works
Relevancy 79.12%

I need to change some settings in the Local Security Policy but when I go into Control Panel-->Administrative tools, it is not there. Does anybody have an idea of where else Local Security Policy would be? Is there a Run command I could enter?
I am running Windows XP Home SP2.
Relevancy 79.12%

Hey guys,

I'm using windows 7 ultimate,I recently found that in my administrative tools, there is no "local security policy". I tried to add the snapin through mmc there also i cannot find local security policy. should i register any .dll file?

Any help would be appreciated...

A:Cannot find local security policy

Quote: Originally Posted by Delphin

Hey guys,

I'm using windows 7 ultimate,I recently found that in my administrative tools, there is no "local security policy". I tried to add the snapin through mmc there also i cannot find local security policy. should i register any .dll file?

Any help would be appreciated...

sorry to disturb u guys. I found it.

Local Security Policy Editor - Open
Relevancy 69.66%

Hi all!

Windows 7 Pro 32 bit on a domain

I've NEVER seen this before and I cant figure it out.

I have a group policy set on an OU named LAPTOPS. The policy gets applied, however the User Config\Windows Setting\Scripts\Logon DOES NOT. When you run the GPRESULTS on the laptop, I see the policy settings being applied EXCEPT for the LOGON script. Its not there. I dont see any errors and cant figure out why Windows would ignore this one setting in the policy but apply the rest. I've tried deleting and recreating the policy but that does not work. Also made sure I did a GPUPDATE /FORCE

Thanks in advance!

A:Group Policy Applies Policy EXCEPT for 1 Setting!

Is a policy enforced on a domain or site level?
Relevancy 69.23%

pls help me out in this issue . i am having 20 systems i want to impletement group policies on all machines in a workgroup

how can i do that this is an windows 2000 professional environment

A:How to configure group policy in work group


Walk to each computer and set the policies on each computer. If you are not in a domain environment you are basically have to set each one manually.

My only other thought is if all the computers are exactly the same make and model and you have some type of imaging software. You could make a standard install on one computer with all the settings you want and then use that computer to image all the other computers on your network.
Relevancy 66.65%

I have a network of computers that all run Windows with a Windows NT server with the most recent service pack I recently reformated all of them and installed Windows fresh They re all connected to the network and can share resources They all log on to the network using the same user name and password under the same domain I {Advice Given} [or] Policy name file System Policy the System Win - "Anyone 95 Editor know want to be able to restrict their ability to enter the control panel and change desktop settings and other things I tried using the System Policy Editor to create a policy I added the user name everyone uses to log {Advice Given} - System Policy Editor [or] "Anyone know the Win 95 System Policy file name on by using the browse button {Advice Given} - System Policy Editor [or] "Anyone know the Win 95 System Policy file name and finding the username on the server then I edited the user and restricted access to various things but after creating the policy it asked me to save it The Save box opened at the C hard drive level I saved it on the C drive but the policy didn t go into effect Is there somewhere special where this policy file has to be saved in order for it to take effect Do I have to be logged of of the server in order to create a policy Do I have to reboot the server before the changes take effect Or instead of adding the username to the System Policy Editor should I instead add the Group that the user is a part of I would appreciate you help greatly Soveh nbsp

A:{Advice Given} - System Policy Editor [or] "Anyone know the Win 95 System Policy file name
Relevancy 66.65%

Is it possible to set administrators to one GP and standard users to another? I want to disable Command Prompt, Task Mgr and lockout all USB and CD drives for standard users but allow administrators to access all of those.

How do i set different group polices depending on user?

Thanks in advance

A:Set Group Policy different for each user group?

Yep. As long as the policies you want to deploy to those groups are per-user (i.e. within the user configuration section of GP Editor), then you can use a tool like Microsoft's GPMC to "security filter" the effects of a GPO to a particular user group. Or, you might want to check out Desktop Policy, which provides a simplified web interface into Group Policy and makes targeting by group much simpler (full disclosure--I work for this company).

Relevancy 65.79%

I need to add a domain group containing a large amount of users to a local group on several machines. I can create the group locally, but I would have to manually enter each user account. I just want to add the existing domain group.

It is an NT network and the clients are XP Pro.

A:Adding a domain group into a local group

Nevermind, I figured it out.
Relevancy 64.07%

I'm looking for a free policy editor program for Windows XP.
Can anyone suggest me one? Or drop a download link?


A:Policy editor

You can use Resource Hacker tools. Just Google for download link.
Relevancy 64.07%

I am doing some work for a school for kids with autism and they just destroy an os is there a way to edit polocies on xp to let them click only on what is on the desktop

A:policy editor

Hi, As an adminastartor you set up a limited account, that you can set up with shared folders on the desktop. This account can be password protected as well by you so that it is only accesed when you allow it. Just use a different name for yourself in that limited account.

Hope this helps
Relevancy 63.64%

I know this is a stupid question and I know that I could look it up in my NT 4 book but I lent that out so here I am.......

I did a fresh install of NT4 SP3 on my PDC and BDC and I want to implement policies, when I go into policy editor and create the policy and save it where should I save it so it comes up? by default it went to c:\ but then when I reboot it is not implemented.....

please help....big ol brain fart here.....

Relevancy 63.64%

I need to set up a "Joe User" account, but am confused on what the best way to do it. What I need is an account that has certain restrictions and duplicating all the attributes for all the other users. Can anyone offer any insight or point me to a resource pertaining to system policy?
thanks so much

A:Help with the Nt System Policy Editor.


The best way to do this, is to assign global groups permissions to resources, and add Joe Soap to the global groups that he needs to be in.

For all user specific directories set up in User Manager for domain, you can use the %username% variable.

So, his home directory might be on \\File_Server\User_directories\%username%

Then the first time he logs on with the account, a directory will be created on the server called "Joe Soap" and this will added to his User manager for Domains account, so it will then read:

\\File_Server\User_directories\Joe Soap
For local machine settings, the best thing is to use a combination of System Policies, and logon scripts to control his access to his own PC.

What specifically do you want to do?


Reuel Miller
Windows NT Moderator (yes, that does make me biased )

[email protected]

Every morning is the dawn of a new error...
Relevancy 63.64%

I am working with NT What I am trying to do is access a Editor System Policy computers system policy editor from a server It comes back with an error quot Windows cannot connect to the computer Make sure that you have Administrative privileges for the computer that it is on the network and has user-level access control enabled and that the Remote Registry service is enabled on both computers quot I do this all the time but something isn t working on this PC The System Policy Editor computer that I am trying to access came with and I reformatted it and put NT on it I am logged onto the computer with Administrative privileges and I am accessing the computer via the network so that isn t the problem I was just wondering if someone could lead me in the direction of making sure that the user-level acces control is enabled and the Remote Registry service is enabled If someone could help it would be greatly appreciated if not I will just keep plugging away nbsp

A:System Policy Editor

I think that I have it now, if anyone cares. When I reformatted the PC for NT 4 I created 2 partitions one was 2 GB and the other I think 18 GB. What I did was partition them both with NTFS, I went in and changed the 2 GB partition to FAT and it seems to be working fine.
Relevancy 63.64%

Hello I have a problem on my Windows Professional machines restored from an Acronis backup where I have a local Security Group quot myGROUP quot lists several members as unresolved SIDs S- - - -aaaaaaaaaaaa-bbbbbbbbb-ccccccc- I need to delete quot myGROUP quot but when I try to I get the error quot The specified account name is not a member of the group quot It appears to be associated with the unresolved user because I then proceed to remove the SID and hit apply to which I get the same error as before I've Users group." being the account specified of Group member not Unresolved Local from preventing name Security deleted: is "The a tried using CMD and Powershell to delete with no success I've tried deleting the Unknown User profiles I've looked in the registry to see if I can find the user profiles in the HKLM SOFTWARE Microsoft Windows NT CurrentVersion ProfileList but they are not listed I did however notice that the SID listed in the membership of quot myGROUP quot was similar to one listed in the ProfileList as the start and end were the same but the middle strings were different Unresolved SID S- - - -aaaaaaaaaaaa-bbbbbbbbb-ccccccc- ProfileList SID S- - - -dddddddddd-eeeeeeee-fffffff- Could the Acronis restore have changed the SID of my user thus corrupting the local group Is there any way to fix this
Relevancy 62.78%

Hello there I created an account just to ask for help Sorry for that and problems MMC and editor policy errors All right so I was trying to setup a standard account with all access into the secondary drive denied and it seemed -not sure really- that it shared a quot user group quot with my main admin account and so it would deny it access too so I searched for a way to change the user group I found a guide and proceeded to follow it but it required that I go to quot Local Users and Groups quot in the left MMC and policy editor errors and problems panel of the Microsoft Management Console But to my total confusion it wasn't there as can be seen in this image But that window looked familiar and I opened a link I have to the Local Group Policy Editor which opened with this error -that appears a second time after I click ok- So I'd appreciate it a lot of you guys could help me with these matters - Fixing the Microsoft Management Console from not showing quot Local Users and Groups quot and possibly other stuff in the left panel - Fixing the Local Group Policy Editor from showing that error - My original purpose of denying a standard account access to a secondary drive The point is to run some executables quot as quot that account so that it cannot access that drive Of course any subprocess or any other executable created or ran by the first shouldn't be able to access that drive either Thanks so much
Relevancy 62.78%

I need to edit users local security policies from the command line.
Is there any good sites for this.

I am looking to change the maximum password age.


A:W2kpro system policy editor

Hi bollejo,
Try here See if one of those tools helps!!
Relevancy 62.78%

I want to set system policy to force password change. It is my understanding that Windows 7 group policy editor is not availible with Windows 7 basic or Home Perimum. This being the case does this mean that there is no way to change policy these to versions or just that the policy editor itself is not available. Is there any way around this?
Please Comment


A:Solved: Windows 7 policy editor

Yes, it is not available for Basic or Home Premium. The Group Policy Editor is basically an interface for registry settings, so you could edit those using Registry Editor. Microsoft has provided spredsheets that lists group policies and their respective registry entry. You can use that to perform the same functions of Group Policy Editor. Use the one for Vista.

But fair warning! Incorrect changes to your registry could prevent Windows from working. Edit your registry ONLY if you are very comfortable!
Relevancy 62.78%

Does anyone know how to setup a policy on the local machine itself? I want an administrator account and a public account. In the public account I don't want any right-clicking, changing desktop icons, things like this. I also want all of the things left on the desktop (downloads, shortcuts, etc.) to be gone when they log out. I did look at group policy editor but I don't like it. So I put System Policy Editor on it from a Windows Server 2000 CD. I have a .POL file made already and can't get it to work. Any ideas? Any websites on this would also be great.


Relevancy 62.35%

I have a winnt version 4 on a workstation computer at work and need to set up the policy editor. I've read that the winnt resource kit has it. There are 2 different winnt resource kits; the winnt server resource kit is 3 times as expensive as the winnt resource kit. Does both kits have the policy editor. Thanks.

[This message has been edited by robertd (edited 10-12-2000).]

A:{Advice Given} - Does winnt resourse kit have a policy editor?


Yes, poledit is on the Workstation Resource Kit.

It mentions it in this Technet Article.


Reuel Miller
Windows NT Moderator (yes, that does make me biased )

[email protected]


Every morning is the dawn of a new error...
Relevancy 61.92%


I have a stand alone XP pro computer that is not (as far as I know) part of a Domain.

I have found many indicators that my machine is being fed Group Policy from a Domain controller.

I would like to know how this could be when I have not attempted to join a Domain.

Perhaps someone could give me a reasonable explanation why all my OS settings, security, software firewall, registry and even spoofed MAC addresses appear to be set by Group Policy dispite the fact my computer is not (as far as I know) a member of a Domain.



A:Group Policy

So I assume you are in a LAN with domain controllers?

Did you check Computer Properties / Computer Name?
Does it say you are in a domain or in a workgroup?
And if you click the Change button, is the domain or workgroup radio button checked?
Relevancy 61.92%

I was wondering if someone can help me.

When I try to access the Group Policy via the run command gpedit.msc while being logged on as user I receive the following error message:

Group Policy Error

You cannot perform this operation. Please contact your system administrator.

I then logged in as Administrator and opened the Group Policy>Computer Configuration>windows settings>security settings>security options

What policy do I need to reconfigure so that the GO is accessible when the user is logged on?