Welcome to WinForumz.com!
FAQFAQ   SearchSearch      ProfileProfile    Private MessagesPrivate Messages   Log in/Register/PasswordLog in/Register/Password

Group Policy Editor

 
Goto page Previous  1, 2
   Windows XP (Home) -> XP Security Admin RSS
Related Topics:
Group Policy - I want to setup windows xp sp2 to prevent users from being able to install any other than windows updates. They still should be able to use their flash drives, but not install any programs on the computer. This

Group policy - For some reason when i push out my group policy the local admin profile gets acces. Basically what happens is add local printers is grayed out i also cant change my time. It seems to me that the the local admin account ends up getting..

Constraining Group Policy - I'm currently trying to rollout outlook 2003 to all of the machines in my company. In this process I'm using an .mst file that is creating the user profile and setting them up to use exchange. Along side this process I'm to..

Constraining Group Policy - I'm currently trying to rollout outlook 2003 to all of the machines in my company. In this process I'm using an .mst file that is creating the user profile and setting them up to use exchange. Along side this process I'm to..

firewall - group policy - I Windows Onecare a few months back. It expired and I removed the program. Now I don't have a firewall. Firewall is on for a few seconds on startup and then turns off. I cannot enable it (I am . It says its under group..
Author Message
Lanwench [MVP - Exchange]

External


Since: Jun 07, 2007
Posts: 369



(Msg. 16) Posted: Tue Jan 29, 2008 8:44 am
Post subject: Re: Group Policy Editor Get Alert [Login to view extended thread Info.]
Archived from groups: microsoft>public>windowsxp>security_admin (more info?)

ed black <edblack.DeleteThis@discussions.microsoft.com> wrote:

<snipped for length>
>
>
> The microsoft H&S files written in the OS and supplied with thexp MCE
> OS say this can be done.

You continue to bark up the wrong tree.
>
> I GET THERE AND THE FOLDERS EMPTY --- no "Software Installation"
> node in the "Software Settings" Folder.
>
> You and I can yell and shout all we want. It doesn't change this
> fact. Forget about my 3d party software that doesn't run. That's no
> longer the issue, explain the issue with the empty "Software
> Settings" Folder.

In a *local* policy this does not exist. It certainly exists in *domain*
policies....and I've already agreed that help & support in XP is incorrect
here. I'm sure Microsoft has been made aware of this - it isn't the first
time it's happened.
>
> Or do you even care that there's a flaw in the MS component? Is it so
> trivial, that I as an End User shouldn't be concerned about it.

What "component"? You're talking about a badly-written help file, not group
policy itself.

>
> You're probably right, I probably shouldn't mess with the Local
> Policy or the Group policy,

That's correct - and you don't *have* a "group" policy. You are not
administering a domain.

> But like I said, there's a problem with
> the GPE. I understand that xp mce is obsolete and Vista is the
> latest flavor, but at least recognize there's a problem with the
> GPE. You can't deny it, I can supply screenshots or whatever.

Vista, MCE, XP, it doesn't matter. This is a permissions issue in the
registry and file system, plain and simple, and cannot be addressed via
policy....period.


>
> Good Day, And you don't need to reply again if you're going to skirt
> the issue of the flawed GPE.

(sigh)

The policy editor isn't the problem. I have my own XP box here & it's the
same. When I work with policies in a domain environment (which MCE can't
even join, mind you) I have these options available to me. Misleading? Yes,
I can see that - but only if you're looking at group policy help files,
which concern a topic entirely irrelevant to your original post.

Again: even in a domain this is not how one handles a situation like yours,
which involves modifying permissions in the filesystem and registry to
permit non-admins to run badly written third party apps Software
installation has nothing to do with this - nor does software restriction
(another area you wouldn't want to mess with).

I've done my best to direct you in the right direction but it is becoming
evident you aren't all that interested in fixing the actual problem that
caused you to write your post in the first place, which you surely could
have done by now if you'd investigated the Sysinternals tool and modified
your permissions. If you can't figure out how to change the permissions
(which is a fairly basic task in Windows!) you would definitely not want to
get involved in policy settings or you will end up with an unusable
computer.

I'm now done - I wish you luck in solving your problem.

 >> Stay informed about: Group Policy Editor 
Back to top
Login to vote
ed black

External


Since: Jan 27, 2008
Posts: 8



(Msg. 17) Posted: Tue Jan 29, 2008 5:04 pm
Post subject: Re: Group Policy Editor Get Alert [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Okay I finally came across the disclaimer in the help files

" . . . because Group Policy can have snap-in extensions added to or removed
from it, the exact set of subitems that you see might be different."

then I came across this item

http://support.microsoft.com/kb/555218/en-us

I followed the directions and the system confirmed that the extension was
successfully registered. There was still no "Software Installation" subitem
when I restarted the GPE.

Then I found this

http://technet.microsoft.com/en-us/library/bb742376.aspx

Still didn't work after I followed the directions and added the snap-in and
all extensions. Strangely enough, the Software Installation snap-in
extension was included in the check box for adding extensions. I did the
restart and everything.



I'm resigned that I can't operate the GPE for user configuration of software
installation.

I do however suspend belief that the Snap-In won't work for me on this
computer until I see for myself if it works or not, but since it's not
available for me to attempt, then I won't say it can't work or will work for
my purposes to allow limited users to run some apps. I admit I'm a novice
end-user and for what it's worth I do respect your knowledge, experience and
wisdom. It's just that I need to experience for myself whether or not the
GPE will resolve my issue.

That being said, I have to start looking for the tutorials on what you've
described by editing registry and learning NFTS. I don't have time right
now, so I'm going to have to live with fast user switching to go from the
limited accts to admin when I need to check the weather or do screen captures
and uploads to image sites. I've also discovered that the FPS multiplayer
online game that I use can only be run in admin anyway because of the
PunkBuster Anti-Cheat requirements.

 >> Stay informed about: Group Policy Editor 
Back to top
Login to vote
Lanwench [MVP - Exchange]

External


Since: Jun 07, 2007
Posts: 369



(Msg. 18) Posted: Wed Jan 30, 2008 8:45 am
Post subject: Re: Group Policy Editor Get Alert [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

ed black <edblack DeleteThis @discussions.microsoft.com> wrote:
> Okay I finally came across the disclaimer in the help files
>
> " . . . because Group Policy can have snap-in extensions added to or
> removed from it, the exact set of subitems that you see might be
> different."
>
> then I came across this item
>
> http://support.microsoft.com/kb/555218/en-us
>
> I followed the directions and the system confirmed that the extension
> was successfully registered. There was still no "Software
> Installation" subitem when I restarted the GPE.
>
> Then I found this
>
> http://technet.microsoft.com/en-us/library/bb742376.aspx
>
> Still didn't work after I followed the directions and added the
> snap-in and all extensions. Strangely enough, the Software
> Installation snap-in extension was included in the check box for
> adding extensions. I did the restart and everything.
>
>
>
> I'm resigned that I can't operate the GPE for user configuration of
> software installation.

But *installation* isn't your issue anyway, though. You'd have the same
problem, as the installers for your applications are not doing what they
should do, which is set permissions accordingly so that end users can use
them.
>
> I do however suspend belief that the Snap-In won't work for me on this
> computer until I see for myself if it works or not, but since it's not
> available for me to attempt, then I won't say it can't work or will
> work for my purposes to allow limited users to run some apps.

OK, don't say it. I will. That is not what it is for. Smile

> I
> admit I'm a novice end-user and for what it's worth I do respect your
> knowledge, experience and wisdom. It's just that I need to
> experience for myself whether or not the GPE will resolve my issue.

Sure, go to town.
>
> That being said, I have to start looking for the tutorials on what
> you've described by editing registry and learning NFTS. I don't have
> time right now, so I'm going to have to live with fast user switching
> to go from the limited accts to admin when I need to check the
> weather or do screen captures and uploads to image sites. I've also
> discovered that the FPS multiplayer online game that I use can only
> be run in admin anyway because of the PunkBuster Anti-Cheat
> requirements.

I'm really not sure what you're looking for where "how to change
permissions" is concerned or I would happily have given you a link. This is
really pretty basic stuff - it's been pretty much the same since NT first
came out. Google should help.

Good luck out there....
 >> Stay informed about: Group Policy Editor 
Back to top
Login to vote
Display posts from previous:   
   Windows XP (Home) -> XP Security Admin All times are: Eastern Time (US & Canada) (change)
Goto page Previous  1, 2
Page 2 of 2

 
You can post new topics in this forum
You can reply to topics in this forum
You can edit your posts in this forum
You can delete your posts in this forum
You can vote in polls in this forum

Categories:
  Windows XP
 Windows Vista!
 Win 2000/NT/98/ME


[ Contact us | Terms of Service/Privacy Policy ]