Over 1 million tech questions and answers.

Group Policy Editor or Local Security Policy

Q: Group Policy Editor or Local Security Policy

Will either of these allow me to restrict drive access to a single user only? I've tried to restrict drive access with Group Policy Editor but it applies the restriction globally--even to me the administrator.

Could anyone let me know if this is possible and how to do it?

Much thanks.

Preferred Solution: Group Policy Editor or Local Security Policy

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Group Policy Editor or Local Security Policy

I take it that you want to restrict access to this drive to everyone but yourself. Which drive are you referring to, is it locally connected or via a network?

Read other 6 answers

Hi Team,
Please let me know what is the standard Setting for below Security Setting ( Audit Policy ), which are followed in most of the Company.

For Eg:- Should i set ' Success & Failure ' for ' Audit account logon events ' & for ' Audit account management' etc...

Thanks & Regards,

Read other answers

I have created three user accounts on my computer. Admin, Maint and operator...added the operator account to the group policy snap-in with very restricted policies. Problem is I have somehow associated the Admin and maint as well, how do I reset the local group policy back to default settings? I need to recover the admin capabilities to make changes to the computers.

A:local group policy editor

Hi..JOEYGE... Welcome to SF...Check this link. Hope it helps.

Local Group Policy - Reset to Default

Read other 9 answers

Can anyone advise me on how to open the Local Group Policy Editor in Windows 8, because typing GPeditor.msc in the run prompt doesn't work. I've looked online for an answer but wasn't able to find anything helpful. I would like to make a change to the boot time from here, but for the life of me, can't figure out how to get into it. Please help.

A:Solved: Local Group Policy Editor

Read other 14 answers


In all editions of Windows 8, there is the local group policy editor? If so, how do I find it?


A:Find the local group policy editor

Open Run box & type in:


& click OK.

I know it's available in the Pro version.

Read other 4 answers

I have been trying to open the Local Group Policy editor as I need to check the "Lock pages in memory" option in order for a PS2 emulator to work.

I can find the file when searching in my computer but when I open it it says it cannot create the MMC span-in. I have tried to add it to the MMC by clicking on file and Add/Remove snap-in, but when that box opens the 'Group Policy Object Editor' doesnt exist on the list of items.

I am really confused and cant work out why it doesnt seem to exist or work on my computer.

I am running Windows 7 Home Premium.

Thanks for your help

A:Can't find Local Group Policy editor

Welcome to the forum,

Group Policy editor is not available on home premium.

win7 home final - no gpedit.msc?

Read other 2 answers

When I run the Local Group Policy Editor an error box appears telling me that Resource '$(string.VerMgmtAuditModeEnable)' referenced in attribute displayName could not be found. File C:\windows\PolicyDefinitions\inetres.admx, line 1495, column 249.
This occurred after a clean install of Windows 8 then download and update to Windows 8.1. I have done two installs and updates to Windows 8.1 and still the problem persists. Any help in solving this, as it is annoying me. Thanks.

A:Local Group Policy Editor Error.

Hi harrycat310,
Please take the following steps to fix this issue:
1. Visit the following link and download the Administrative Templates (.admx) for Windows 8.1 Update and Windows Server 2012 R2 Update
2. Install the msi and replace the folder C:\Windows\PolicyDefinitions
with the folder PolicyDefinitions created by Windows8.1-Update-ADMX.msi.
3. Please backup the folder C:\Windows\PolicyDefinitions before the replacement.
Best regards,
Fangzhou CHENFangzhou CHEN
TechNet Community Support

Read other 18 answers

I want to disable the default reboot after Windows runs unattended updates as this often prevents my overnight backup from running.

I have tried using the gpedit.msc routine to access the Local Computer Policy Editor but apparently that does not work in Win 7 Home Premium which I have.

Is there a manual way I can disable the reboot function?

A:Can't access Local Group Policy Editor

Hello Franco, and welcome to Seven Forums.

The Windows 7 Home Premium edition doesn't include the Local Group Policy Editor. However, you can use OPTION ONE in the tutorial below to disable the automatic restart for Windows Updates instead.

Windows Update - Enable or Disable Automatic Restart

Hope this helps,

Read other 5 answers

Hi, I have a question about the Local Group Policy Editor. I know you can either enable or disable things for all users but is there any way to enable or disable things for only a certain user group (either Standard Users in general or a customized user group created in the Local Users & Groups Editor (lusmgr.exe). For example if I want only a certain user group to be able to lock the computer, in the Local Group Policy Editor I can enable that so no-one can lock the computer but I want admins to be able too etc.

I would love it if someone could answer my question soon

Daniel Callaghan

A:Local Group Policy Editor Question

Secpol.msc / Local Policies / User Rights ? This won't stop them from logging off...
But this will: Start Menu - Enable or Disable Log off

Read other 9 answers

I want to disable auto run and auto play of my disk drives for security. To do that, I need to access my Local Group Policy.

However, while logged into my regular account, I am unable to access the Local Group Policy Editor via the gpedit.msc file.

I get a "You don't have permission to access this file" error message.

I don't even have the joy of a UAC prompt. : (

I have Win 7 Pro and am the only user and owner of my computer.

Do I have to get into my admin account and change the settings from there?

A:Unable to open Local Group Policy Editor (using Win 7 Pro)

See if these tutorials help:

AutoPlay - Enable or Disable

AutoPlay - Turn On or Off

AutoPlay - Enable or Disable for Non-volume Devices

AutoPlay Shortcut - Create

Autorun.inf Files - Completely Block

Read other 1 answers

I have set some access limits on some programs, but the user that has the limits can run the Local Group Policy Editor and change the settings. How do I prevent access by other users to the Local Group Policy Editor?

Thanks for the help.

A:How do I limit access to the Local Group Policy Editor?

Hello Runandnottire, and welcome to Seven Forums.

The only way to do so would be to change their account type from administrator to standard user.

Hope this helps,

Read other 3 answers

I created a policy for non-administrators in Microsoft Management Console. However, I couldn't find a policy to restrict user into a specified folder.

A:How to use local group policy editor to restrict users to Desktop

Exactly what are you trying to accomplish?

Read other 3 answers

I have three Windows 8.1 Pro computers ( not on domain ) One of the three we consider the master and would like to take the User Configuration - Administrative Templates configuration and export it and import it into the other computers. I was wondering
what is the best way about going about how to do this? 
I have tried the following and did not work is this only for Win7 machines?:
1.) Open %systemroot%\system32\grouppolicy\

2.) Within this folder, there are two folders ? ?machine? and ?user?. Copy these to folders to the ?%systemroot%\system32\grouppolicy ? folder on the target machine. All it needs now is a reboot or a ?gpupdate /force?.
Any input would be greatly appreciated. 

Thank you! 

Read other answers

Hi all
For the past 6 months we have received reports of PC's taking up to an hour to get to the login prompt.
All our PC's are running Windows 7 32/64 Bit.
The message is always "Applying Group Policy Local Users and Groups policy"
Once it gets to the login prompt they will login with no problem.
I have enabled GPO logging on 1 PC and the results show as below (sorry for the wall of text) Boot time was 15:16.
I was hoping someone else had come across this issue and maybe has some insight
Network team say "its not the network"!!
Server Team say "Its not DNS or Group Policy" !! 
So its been left with me on the desktop team to diagnose the fault
Paul Griffiths - NHS Trust in Bristol

GPSVC(534.75c) 15:17:14:459 ProcessGPOs: -----------------------
GPSVC(534.75c) 15:17:14:459 ProcessGPOs: Processing extension Group Policy Local Users and Groups
GPSVC(534.75c) 15:17:14:459 ReadStatus: Read Extension's Previous status successfully.
GPSVC(534.75c) 15:17:14:459 CompareGPOLists:  The lists are the same.
GPSVC(534.75c) 15:17:14:459 GPLockPolicySection: Sid = (null), dwTimeout = 30000, dwFlags = 0
GPSVC(534.75c) 15:17:14:459 LockPolicySection called for user <Machine>
GPSVC(534.75c) 15:17:14:459 Sync Lock Called
GPSVC(534.75c) 15:17:14:459 Writer Lock got immediately.
GPSVC(534.75c) 15:17:14:459 Lock taken successfully
GPSVC(534.75c) 15:17:14:459 ProcessGPOList: Entering for extension Group Policy ... Read more

Read other answers

Not long ago Soul Invictus loaded winXPpro on the PC and confronted an issue. Thats really not surprising. Issues exist using this, the latest & greatest OS in wide distribution world-wide. It was developed upon previous versions, so it really shouldn't come as a big surprise what it does & to some extent, how it does it. Yet, it still exists with functionality barely defined to the novice user, IMHO.I have XP Professional and I'm getting my bearings on the differences between this version and another XP version. I notice this one has a Windows Firewall. My problem is that I used to be able to access my employer's company intranet from home. When I go to the site and enter my login info I get the message: Access Denied (policy_denied). Your system policy has denied access to the requested URL. For assistance, contact your network support team. I'm thinking I have to modify a setting in gpedit.msc, however I can't be sure. Any thoughts of what security setting that needs to be modified? My thoughts are:Policy information in winXPpro is kinda confusing.Like many, I am the network support team in my household.My thoughts are: "What should I do when contemplating changing a setting".Any changes might best be done knowing first what the default settings are.and where to find them.and how to interpret the information available on the OS about these settings. So, I navigated to the "group policies" that typing gpedit.msc in the &q... Read more

Read other answers

i would like to know if there is a way to get the group policy editor to work for windows 7 home premium

A:group policy editor

Hello Shark,

Sorry, but no.

Group policy is only available in the Windows 7 Professional, Ultimate, and Enterprise editions. That's one of the reasons why Home Premium is cheaper in price.Local Group Policy Editor - Open
You can still use the registry to set policy instead. You could just post what you needed, and I'm sure we can help like in your other post here for this.

In addition, here's the group policy search page to know what registry settings to use. Group Policy Search

Read other 2 answers


I'm setting up a Windows XP machine with a guest account that has very limited access and that's only for the internet. I've configured the GPEDIT.MSC settings but it also affects the Administrator account as well as the Guest account.

How do I configure GPEDIT.MSC WITHOUT affecting the Administrator account? Thanks!

By the way, this PC is connected directly to the internet and not a company network.


Read other answers

Hello, All!

I need to lock down a machine for customer use and I decided to use the Group Policy Editor. Well, I found out that whatever I do to lock users down in GPEditor, it locks down my administrators account as well. I thought that it will only affect people who do not have admin priviliges but I was wrong! Here's my question:
How do I lock people down using the Group Policy Editor WITHOUT affecting the administrator's account or any other admin for that matter? Thanks!

A:Group Policy Editor

Try denying administrators read access to C:\WINDOWS\system32\GroupPolicy folder. I have been told by an MCSE that this works but have never tried it. But once you do this, you will not be able to run gpedit until you give the administrators read access again. So you will have to toggle permissions back and forth if you do alot of editing to the group policy files. This is about the only way you could do it on a standalone system. If you have 2000 or 2003 server you could then implement policies based on groups of users.

Read other 1 answers

I have windows 8.1 which doesn't come with gpedit installed. I've been able to download it but can't take the next step of actually completing the installation.
Anyone tell me how this is done?

Read other answers

This is sort of a branch from a previous post to do with protection a computer that will have public access.

One of the suggestions was to use the Group Policy Editor. I am somewhat inexperienced here and one thing I am not understanding; How do I make the changes (restrictions) apply to just one user (Guest) or a guest-like user and not the Administrator?

Any help is gratefully appreciated.

A:Group Policy Editor

What exactly are you trying to restrict? Program acess? Drive access? Applet access, as in certain areas of Contol Panel or even Control Panel as a whole.

I had a question similar to this not too long ago, but I specifically wanted limited drive access. If that is what you're looking for too, you would restrict the access by way of the drive itself.

Example: Go to Computer, right click the drive you want to edit, click Properties, click the Security Tab, click the Edit button, click the Add button, enter the User Name in the box and click Check Names, then OK. Then you would check Deny for whatever property of the drive that you want that User denied access to. Click Apply, then OK, then you're done.

Reply back with what you're looking to do.

BTW, Group Policy Editor is not included in the Home versions of Windows 7

Read other 9 answers

On advice of a magazine article I was trying to access 'gpedit.msc' from a start search.
Nothing came up, not even in the admin account.
Anyone know how I can access this ?

A:Where is Group Policy Editor

Hello Rufford,

I'm afraid that the Local Group Policy Editor is not available in the Vista Home Basic edition.

Local Group Policy Editor - Open

Read other 9 answers

Hi all,
I received this message when i tried to look at the local group policy setting on one of my machines (Windows XP SP3), which is joined in my domain.
"Failed to open group policy object on this computer. You may not have appropriate rights.
Unspecified error."
note that I am local admin.
It's all started when I was troublshooting WSUS connectivity and i looked at the WinsdowsUpdate.log, the WSUS server was <Null> & WSUS status server <Null>, I tried to force the domain GP by using GPupdate /force, it went fine and asked to
log off, but nothing changed in the WindowsUpdate.log still <Null>. Then i tried to look at the local policy setting.
I searched the internet nothing related to my case.
Thanks in advance for advising.
Mohammed Adel

A:Group policy error: Failed to open group policy object on this computer.

I guess reinstall windows is the solution, I also found one log "event id 1096", related to "registry.pol" it was corrupted.
Mohammed Adel

Read other 9 answers

I have logged in as administrator and I am trying to start up the 'Group Policy Editor' using gpedit.msc but Windows 7 can't find it. Is this something that has to be installed or comes inbuilt with Windows 7?

A:Can't find Group Policy Editor

The Home edition does not have access to the Group Policy.

Read other 3 answers

Hey guys I just found a really good site for windows group policy editor. Although the codes are for XP all of them will work in windows 7 I know because I have seen the GPE before and it's basically the same layout.

I will attach the word document with the codes and what they do.

A:Group Policy Editor Jackpot

You will find this interesting:
Group Policy Search

don't know how current the next one is, but I've used the site before:
Download: Group Policy Settings Reference for Windows and Windows Server - Microsoft Download Center - Download Details

Read other 3 answers

Hello guys!

I need to know how to launch Group Policy Editor. I already know how to launch it via
But thats not working for me. Maybe because i have SSD disk and I have disabled search and indexing.

So hopefully some genius out there might know of a another way of launching group policy editor.

A:How to launch Group Policy Editor

Hi, Welcome to SF,

You could try this

Windows + R would open RUN
Try to Type under Run see whether it brings


Go To C:\Windows\System32\Gpedit

Hope this helps,

Read other 9 answers

Does any one know how to find the group policy editor in Vista?


A:Group Policy Editor in Vista

Press winkey + r, type gpedit.msc, press enter.

Read other 2 answers

Trying to get rid of the annoying popup in ie9 "Speed up browsing by disabling add-ons", I googled and got a suggestion. Trying to open GPEDIT.MSC and I keep getting MMC could not create the snap in.

This happens with open as administrator and after a reboot. Can someone tell me what's wrong, please?

A:Can't open Group Policy Editor

Group Policy editor is not included in the Windows 7 Home Premium edition.

Read other 6 answers

I am running Windows 7 Pro and know how to work the group policy. Is there any way I can assign options to a specific group that I created?

A:Group Policy Editor for specific groups

Hello there.
This tutorial should help: How to apply local group policies to a specific user or group.

Read other 3 answers

hey i just bought a new notebook with vista premieum installed but i am unable to open group editor policy. i do type in search box at start button the sam gpedit.msc but with no result.

also i was able toaccess run but now i can't even find run , for a sec i thought it mightbe accidentally deleted (by my younger brother) but then i don think it could be deleted from system 32. so plz help if u can

A:group editor policy in vista premieum

Read other 6 answers

- Win7 x64

I want to use the group policy editor, but cannot find it anywhere. I tried opening the .exe with the command prompt and finding it in the control panel to no avail. I browsed to the System32 folder and found the group policy folder, as well as the group policy users folder, but bother are empty. Am I doing something wrong here?

A:[SOLVED] Cannot open group policy editor

Type gpedit.msc at the start menu and hit enter.

Read other 3 answers

in window xp pro sp-2 when open GPedit.msc (Group Policy Editor) it's prompt
"your current security settings prohibit running Active X controls on this page.As a result, the page may not display correctly" and after that nothing is working in group policy editor window excluding close and when i click any options in the window it's prompt the same thing "your current security settings prohibit running Active X controls on this page.As a result, the page may not display correctly"
please some buddy help me.........

please help me.

A:I have a problem with my Group Policy Editor please some buddy help me.

only post the same problem once

please read the forum rules


Read other 15 answers

I've tried about every method to access Group Policy Editor but it keeps saying snap in restricted by administrator. I've tried using cmd but its disabled by system administrator also regedit.exe so I don't know what to do, would like to know if theres
anything that i can do.  Thanks.

Read other answers

Hello! I am nkraoji
I am using Win-XP Professional SP-2.
While opening the Group Policy Editor by typing "gpedit.msc" in Run dialog box, immediately a small window titling 'Microsoft Management Console' comes up depicting the following error message :
Snap-in failed to initialize:
Name : Group Policy Object Editor
CLSID : {8FC0B734-A0E1-11D1-A7D3-0000F87571E3}

When I click 'OK', the same error message is repeated in the Group Policy Editor main window.
Can any of my fellow members will guide me to solve this problem?
Thank U.

A:Problem while opening Group Policy Editor

Known problem caused by path variables, to fix try:

Right-click My Computer>Properties>Advanced>Environment Variables>System Variables>Path

In here type (as in add to existing ones, don't overwrite them)


Confirm and okay out of it, you may need to restart but that should be it. If there is a problem though let us know

Read other 2 answers

Windows XP won't let me access the Group Policy Editor by typing gpedit.msc into the Run Dialogue. Is there a way to find it in the system files? Or am I out of luck?

A:Solved: Can't access Group Policy Editor

You're out of luck if you have XP Home. No GP in there.

Read other 3 answers

Hey everyone,
I've been having a bit of an issue with GPE (gpedit.msc). It doesn't seem to break anything important so far, but it's just something annoying I've ran into when editing certain policies, most notably Autoplay.
Basically, whenever I open gpedit.msc, it will give an error or two saying it has encountered an error while parsing.
Translated, it says something like this:
Can't find resource '$(string.SiteDiscoveryEnableWMI)' referenced in attribute displayName.
File C:\Windows\PolicyDefinitions\inetres.admx, rule 34686, column 235
I think it's worth mentioning that my Windows installation was Sysprepped when I received my new motherboard and CPU, and I suspect that having broken more than I'd have wished for. (This was months ago by the way). I'd format the C drive and install Windows 10, but I want to hold off on that for a while. I'm essentially keeping my current installation together with duct tape, so to say.
Here's an image of what I mean. It's in dutch:

This, together with boot times of around 3 and a half minutes (This includes logging in and the time it takes until I can really "use" Windows) makes me feel a little disappointed of the performance. I'm sure I'm not infected with anything nasty. I generally keep a safe system and run Norton AV, MBAM Premium, MBAE, and I have a couple of custom firewall rules. I also use Firefox with Adblock Plus and NoScript.
I really suspect the sysprep and my ... Read more

A:Group Policy Editor (gpedit.msc) Parsing Error

hello ! i had the same problem, 
i uninstalled the windows update KB3087038 and now it's better

Read other 2 answers

Windows Vista Home Premium, How can I turn off group policy, If I try to run defender or change startup programs, it will not allow me. Message to contact your system administrator to turn off group policy.  Please help

Read other answers

I am running Windows 7 Home Premium and want to change something found in:

Group Policy Editor>Computer Configuration> AdministrativeTemplates> Windows Components

Is there a workaround?

A:Group Policy Editor workaround Windows 7 Home Premium 64 bit

Hello Phil,

What did you want to change there?

You could look it up at the link below to see what to change in the registry for it instead.

Group Policy Search

Hope this helps for now,

Read other 9 answers

Running Win7x64 SP1 Pro
Just upgraded to IE11 from IE9
The browser seems to be working OK, but

When I open the Group Policy Editor it says:
Encountered an error while parsing.

Resource $(string.Advanced_EnableSSLFallback)
referenced in attribute displayName could not be found.

File C:\windows\PolicyDefinition\inetres.admx, line795, column 308.

And there is no longer any settings for Internet Explorer under the User Configuration > Administrative Templates > Windows Components as there were with IE9.

A search says something about two files inetres.admx and inetres.adml .

Anybody have a solution to this problem?

Read other answers

(EDIT) Fixed it myself, thanks for the potential help tho!

Read other answers

Hello there,
I want to disable the lock screen on my Windows 8.
So I used this help from a Microsoft website - technet.microsoft.com/en-us/library/cc731745.aspx - on how to "Open the local Group Policy Editor". 
It says to search for gpedit.msc -
Which I couldn't find.
So I searched for MMC and did the following: 

On the File menu, click Add/Remove Snap-in.

In the Add or Remove Snap-ins dialog box, click Group Policy Object Editor, and then click Add.

The problem is: In the Add or Remove Snap-ins dialog box,
there was no Group Policy Object Editor.
Where is it? Why don't I have it? How do I fix it?!
Thanks in advance,

A:Group Policy Object Editor doesn't exist in anyway, shape or form

What kind of Windows 8 are you running? If you are using Windows 8 Starter or Premium edition you will not have access to the group policy editor.
Instead you will need to enable the setting through the Windows Registry.
1. Search regedit to open Registry Editor.
2. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization
3. In the right pane, creating the NoLockScreen REG_DWORD and set value to 1.
Niki Han
TechNet Community Support

Read other 7 answers

I am unsure where to report bugs so I'm mentioning one here. If there is a more appropriate forum then feel free to point me that direction.
EMET 5.5 beta on Windows 10 64 bit will fail to load on reboot after an install if group policy editor has been used to aggressively remove "features" from Windows. One notable problem is disabling Cortana in group policy editor. EMET on my box
really doesn't like that. This is unfortunate as I don't expect Cortana will ever be enabled on any of the boxes I oversee.

Read other answers

I build an XP SP2 pc with all critical updates, with an anti-virus, and a remote software. I use IE to access a particular url so that an employee can clock in or out. I start IE automatically with a process that checks to see if IE is running and if not runs a shortcut to reopen IE in kiosk mode and to the appropriate url. I deny right click usage, control panel, run, etc, through the registry. I am hoping to do this through a local group policy that I can have the Active Directory administrator import into an OU so I do not have to lock down every time clock I build manually. I am not familiar with Group Policy Editor, so if you tell me to create a GPO that sets IE's proxy server setting to a non-existent server, I know what you are saying, but I don't know how to do that. I appreciate any advice anyone might have for me.

Read other answers

So In all my searching I can't really find a workaround for this. I have a domain and plenty of domain users but I have one department that remains local user accounts. All I want to do is set the default homepage for these 47 domain connected machines.
So with domain users I can use loopback policy to apply the user gpo settings to any computer in those specific OU's.  But that simply will not apply to local accounts.  Any other thoughts on how to make this work centrally?  Not super interested
in doing one by one.
thanks in advance.

Edit: I did try pushing a registry setting via the computer config but doesn't seem to be taking.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
?Start Page?=?http?

Read other answers

Hello, I'm using window 7 home. So i dont have local group policy. I want to stop user other than "admin" myself to enter control panel. Anyone know to do it manually? I know there is a way to do it manually with regedit at user setting but not sure how. Or is there any software that does the same thing as local group policy of pro--enterprise edition of window 7?

A:Window 7 local group policy


slight cheating way around it i suppose, go to windows secrets control panel custom etc etc etc

Read other 3 answers

do u know how to configure group policy so once user logs in,he can be assigned local administrator rights.

I wants the moment user logs in a new computer in a domain,in their user configuration
they will automatically assigned local administrator rights rather than I am using contol panel to add manually.

Read other answers

Hi, I have a local group policy on Vista x64 that is not running. This script runs fine on every other OS. W2K > Win7 (including x64 machines) It is a machine policy and it will not run. It is a script that runs bginfo from the Program Files folder. Any ideas? Thanks

A:Local Group Policy Not Running


What version of Vista is this? Is it Home Premium, Home Basic, Business Basic, Business Premium or Ultimate (or other)?

Go into Services, and check for the "Group Policy Client" service. You cannot (easily) stop this service, but make sure it is there and running.


Read other 8 answers