Question about Microsoft Windows Server Standard 2003 for PC

1 Answer

Group policy hai, what is the difference b/w disallowed and unrestricted in Group policy

Posted by on

1 Answer

  • Level 2:

    An expert who has achieved level 2 by getting 100 points

    MVP:

    An expert that got 5 achievements.

    Governor:

    An expert whose answer got voted for 20 times.

    Hot-Shot:

    An expert who has answered 20 questions.

  • Expert
  • 52 Answers

There are two options here Disallowed and Unrestricted

Disallowed means nothing but the OS will run execpt the applications you
specifically allow.

Unrestricted means everything runs except what you specifically block.

If you double click one of these there's a button that says "Set as Defualt"
- By default "Unrestricted" is set. If you've changed this chage it back.

The next step is adding the Hash and blocking it. This is done the same as
you were doing before for the Internet Zone. Right click "Additional Rules"
and select "New Hash Rule." Click Browse and locate a copy of iexplore.exe -
set the security level to "Disallowed".

Apply to the appropriate OU and your done.

If your new to group policy you may want to play arround with the Security
Filtering. Often times a policy as abosolute as blocking IE needs to be
flexible - and moving users in and out a security group is easier than in and
out of an OU. Just depends on your organization.

Posted on Jul 17, 2008

1 Suggested Answer

6ya6ya
  • 2 Answers

SOURCE: I have freestanding Series 8 dishwasher. Lately during the filling cycle water hammer is occurring. How can this be resolved

Hi,
a 6ya expert can help you resolve that issue over the phone in a minute or two.
best thing about this new service is that you are never placed on hold and get to talk to real repairmen in the US.
the service is completely free and covers almost anything you can think of (from cars to computers, handyman, and even drones).
click here to download the app (for users in the US for now) and get all the help you need.
goodluck!

Posted on Jan 02, 2017

Add Your Answer

Uploading: 0%

my-video-file.mp4

Complete. Click "Add" to insert your video. Add

×

Loading...
Loading...

Related Questions:

1 Answer

Starting yesterday when i restarted my computer after editing my group police i find my computer is no longer displaying a task bar so i restart explorer and it seems as if it is running in classic shell...


What OS are you running?

Have you tried system restore? or....

Do you have access to the registry editor? (type "REGEDIT" into the run box)

if so then go to this key :
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies]

there you should see settings for windows explorer and the taskbar.. (a number "0" = setting disabled and a number "1" = setting enabled) just look for the settings related to the taskbar
the settings you are looking for are probably these:

"NoSetTaskbar=1," REG_DWORD 0x00000000 (1) "
"NoTrayContextMenu REG_DWORD 0x00000000 (1)."

Just right click the setting and chose "modify" and change the "1" to a "0" or "delete" the key all together

(I am running windows 7 and all three subkeys under "policies" : EXPLORER , MOBILITY CENTER AND SYSTEM are all empty with no policies set)
better no policy then the wrong policy...lol


if you do not have access to registry then "system restore" option is best .. (if you have somehow edited the group policy preventing you from running system restore then try booting into safe mode and going to the Hidden Administrator account.. and running "system restore" from there... hopefully since that account is usually not used it will hopefully have all of the group policy settings still at their defaults and allow you to restore the system

NOTE: System restore is best option because it replaces the entire registry with a back up copy and all group policy settings are contained within the registry and will be fully restored back the way they were.

if system restore is unavailable then a manual restore operation can be done as a last resort as long as the system restore points have not been deleted... but that is a complicated process that requires putting your hard drive into another computer and manually moving the right files to the correct locations (definitely an expert task...lol).

May 16, 2011 | Microsoft Computers & Internet

Tip

Fix Windows 7 Error ?Windows is Not Genuine? Error code 0×80070005


f63627f.png

Those users running genuine version of Windows 7 provided with their hardware platform reported that immediately after log on they were presented with following error message. “Windows is not genuine. Your computer might not be running a counterfeit copy of Windows. 0×80070005.”
Some other symptoms of associated with this issue are,
The computer desktop background is black, and you receive the following error message on the bottom right corner of the screen:
“This copy of Windows is not genuine”
You receive the following error message when you view the System Properties: (Control Panel / System and Security / System)
“You must activate today. Activate Windows now”
If you try to use slmgr.vbs /dlv to view the licensing status, you receive the following message:
Error: 0×80070005 Access denied: the requested action requires elevated privileges
Microsoft is fully aware of this issue and provided following explanation for the issue,
There is a lack of permissions in the registry key HKU\S-1-5-20. The Network Service account must have full control and read permissions over that registry key.
This situation may be the result of applying a Plug and Play Group Policy object (GPO).
To resolve this issue, you can either disable the policy setting (Method A), or edit the permissions to provide the Licensing Service the required permissions (Method B).
Method A: Disable the Plug and Play Policy

1. Determine the source of the policy . To do this, follow these steps:
a. On the client experiencing the Activation error, run the Resultant Set of Policy wizard by clicking Start, Run and entering rsop.msc as the command.
b. Visit the following location:
Computer Configuration / Policies / Windows Settings /Security Settings / System Services /
If the Plug and Play service is configured through a Group Policy setting, you see it here with settings other than Not Defined. Additionally, you can see which Group Policy is applying this setting.
2. Disable the Group Policy settings and force the Group Policy to be reapplied.
a. Edit the Group Policy that is identified in Step 1 and change the setting to “Not Defined.” Or, follow the section below to add the required permissions for the Network Service account.
b. Force the Group Policy setting to reapply: gpupdate /force (a restart of the client is sometimes required)
Method B: Edit the permissions of the Group Policy:

1. Open the Group Policy that is identified in Method A, Step 1 above, and open the corresponding Group Policy setting.
2. Click the Edit Security button, and then click the Advanced button.
3. In the Advanced Security Settings for Plug and Play window click Add and then add the SERVICE account. Then, click OK
4. Select the following permissions in the Allow section and then click OK:
Query template, Query status, Enumerate dependents, Interrogate, User-defined control, Read permissions
Note: The Previous rights are the minimum required permissions.
5. Run gpupdate /force after you apply the previous permissions to the Group Policy setting.
6. Verify that the appropriate permissions are applied with the following command:
sc sdshow plugplay
The following are the rights applied to the Plug and Play service in SDDL:
D:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)
(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)
(A;;CCLCSWLOCRRC;;;IU)
(A;;CCLCSWLOCRRC;;;SU)
S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
(A;;CC LC SW LO CR RC ;;;SU is an Access Control Entry (ACE) that allows the following rights to “SU” (SDDL_SERVICE – Service logon user)
A: Access Allowed
CC: Create Child
LC: List Children
SW: Self Write
LO: List Object
CR: Control Access
RC: Read Control
SU: Service Logon User
Note: If there are no GPO’s in place, then another activity may have changed the default registry permissions. To work around this issue, perform the following steps:
1. On the computer that is out of tolerance, start Registry Editor.
2. Right-click the registry key HKEY_USERS\S-1-5-20, and select Permissions…
3. If the NETWORK SERVICE is not present, click Add…
4. In Enter the object names to select type Network Service and then click Check Names and OK.
5. Select the NETWORK SERVICE and Grant Full Control and Read permissions.
6. Restart the computer.
7. After the restart, the system may require activation. Complete the activation.

on Jul 15, 2010 | Computers & Internet

1 Answer

I can not edit my account information.


Hi there, I would like to clarify If you are the administrator on the computer your trying to edit your account

If you are the administrator of the computer, and If your computer is part of a network at an organization such as a school, government agency, or a business, your organization's system administrator might have disabled or even removed certain settings by using Group Policy. Group Policy is a feature of Windows that lets system administrators manage users' access to Windows features. If you suspect that Group Policy is preventing you from changing a setting that you need to access, contact your system administrator.

OR

If your computer is not part of a network, a user with administrator privileges might have modified Group Policy on your computer to remove access to the settings. In this case, contact the users who are administrators on your computer to modify the settings you'd like to change.


Jun 21, 2010 | Microsoft Windows XP Professional SP2

1 Answer

Cannot enable sytems restore. Message: Group


1. Click Start, Run and type regedit.exe and press Enter

2. Navigate to the following key:

HKEY_LOCAL_MACHINE \ Software \ Policies \ Microsoft \ Windows NT \ SystemRestore

In the right-pane:

* Delete the value DisableConfig
* Delete the value DisableSR

3. Exit the Registry Editor.

In Windows XP Professional, you can accomplish the above using Group Policy Editor as well.

1. Click Start, Run and type GPEDIT.MSC

2. Navigate to this path:

-> Computer Configuration
--> Administrative Templates
---> System
----> System Restore

3. Set Turn off System Restore to Not Configured

4. Set Turn off Configuration to Not Configured
More Information

Turn off System Restore corresponds to DisableSR registry value. With this Policy is turned ON, the System Restore tab may be missing in My Computer Properties. Also, when you run System Restore (rstrui.exe), you receive this message:

System Restore has been turned off by group policy. To turn on System Restore, contact your domain Administrator.

Turn off Configuration corresponds to DisableConfig registry value. With this Policy turned ON, the System Restore tab will remain displayed but the user cannot configure the SR options. It reads disabled by Group Policy.
http://windowsxp.mvps.org/srpolicy.htm


Or perhaps you can review this
Control of System Restore function has been disabled by "Group Policy".
How do regain control?Go to Start>Run, key in gpedit.msc and hit ENTER. Under Computer
Configuration, expand Administrative Templates, expand System, then click on
the System Restore folder. In the right-hand pane, double-click on Turn off
Configuration and, under the Setting tab, click in the radio button beside
Not Configured. Click on Apply then OK.

Please visit the following Microsoft Knowledge Base website
and review the topic titled: "Method 1: Use Group Policy".

How to Disable the System Restore Configuration User Interface
http://support.microsoft.com/default.asp…

Note: You must be an administrator or owner, or have administrative
privileges to perform this task.

Undo the changes using Group Policy Editor (Gpedit.msc)

-or-

Open Registry Editor and navigate to:

HKEY LOCAL MACHINE\SOFTWARE\Policies\Microsoft\Wind… NT\SystemRestore

In the right-pane, delete the value "DisableConfig".
Close Registry Editor
Close and re-open the System Restore properties page.


Note: Group Policy Editor is only Available in XP Professional (according to http://www.pcreview.co.uk/forums/thread-…

Perhaps one of these links will give you the correct solution
http://forums.techguy.org/windows-nt-200…

http://www.winhelponline.com/blog/restor…

http://www.computing.net/answers/windows…

I hope this helps you to resolve your problem.

Jan 03, 2010 | Microsoft Windows XP Home Edition

2 Answers

In my pc my task manager is no working longer, so how can i fix it, and uses it again.


Verify that the "Local Group Policy" or "Domain Group Policy" doesn’t block you from using
Task Manager in the Local Group Policy

1. Go to "Start" -> "Run" -> Type "Gpedit.msc" and press on "Enter" button.

2. Navigate to "User Configuration" -> "Administrative Templates" -> "System" -> "Ctrl+Alt+Del Options"

3. In the right side of the screen verity that "Remove Task Manager"" option set to "Disable" or "Not Configured".

4. Close "Gpedit.msc" MMC.

5. Go to "Start" -> "Run" -> Type "gpupdate /force" and press on "Enter" button.



For the "Domain Group Policy" Verify correct registry settings::

1. Go to "Start" -> "Run" -> Write "regedit" and press on "Enter" button.

2. Navigate to the following registry keys and verity that following settings set to default:

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\LocalUser\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\]
"DisableTaskMgr"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"DisableCAD"=dword:00000000

3. Reboot the computer.

Jun 06, 2009 | Microsoft Computers & Internet

1 Answer

Whenever i download and install any torrent file on my pc, i get a message to restart. when i restart the system, no icons will be displayed on the screen and not even the task manager gets operated. i get...


For task manager



1. Verity that the "Local Group Policy" or "Domain Group Policy" doesn’t block you from using

"Task Manager".

1.1 "Local Group Policy"

a. Go to "Start" -> "Run" -> Write "Gpedit.msc" and press on "Enter" button.

b. Navigate to "User Configuration" -> "Administrative Templates" -> "System" -> "Ctrl+Alt+Del Options"

c. In the right side of the screen verity that "Remove Task Manager"" option set to "Disable" or "Not Configured".If so set to other and viceversa

d. Close "Gpedit.msc" MMC.

e. Go to "Start" -> "Run" -> Write "gpupdate /force" and press on "Enter" button.

Note: If you are using Windows 2000, please follow KB q227302 instead stage "e".

Using SECEDIT to Force a Group Policy Refresh Immediately
http://support.microsoft.com/kb/q227302/


1.2 "Domain Group Policy"

a. Contact you local IT support team.


2. Verity correct registry settings::

a. Go to "Start" -> "Run" -> Write "regedit" and press on "Enter" button.


Warning: Modifying your registry can cause serious problems that may require you to reinstall your operating system.
Always backup your files before doing this registry hack.

b. Navigate to the following registry keys and verity that following settings set to default:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\LocalUser\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\]
"DisableTaskMgr"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"DisableCAD"=dword:00000000

c. Reboot the computer.


For no icons


go to run just type " explorer " and that should be it

Jun 06, 2009 | Microsoft Windows XP Professional

1 Answer

Disabled task manager


1. Verity that the "Local Group Policy" or "Domain Group Policy" doesn’t block you from using

"Task Manager".

1.1 "Local Group Policy"

a. Go to "Start" -> "Run" -> Write "Gpedit.msc" and press on "Enter" button.

b. Navigate to "User Configuration" -> "Administrative Templates" -> "System" -> "Ctrl+Alt+Del Options"

c. In the right side of the screen verity that "Remove Task Manager"" option set to "Disable" or "Not Configured".

d. Close "Gpedit.msc" MMC.

e. Go to "Start" -> "Run" -> Write "gpupdate /force" and press on "Enter" button.

Note: If you are using Windows 2000, please follow KB q227302 instead stage "e".

Using SECEDIT to Force a Group Policy Refresh Immediately
http://support.microsoft.com/kb/q227302/


1.2 "Domain Group Policy"

a. Contact you local IT support team.


2. Verity correct registry settings::

a. Go to "Start" -> "Run" -> Write "regedit" and press on "Enter" button.


Warning: Modifying your registry can cause serious problems that may require you to reinstall your operating system.
Always backup your files before doing this registry hack.

b. Navigate to the following registry keys and verity that following settings set to default:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\LocalUser\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\]
"DisableTaskMgr"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"DisableCAD"=dword:00000000

c. Reboot the computer.

May 23, 2009 | Microsoft Windows XP Professional SP2

1 Answer

Group policy problem


This a known issue with Microsoft, they descibe how to handle it here:

http://support.microsoft.com/kb/842804

Sep 24, 2008 | Computers & Internet

1 Answer

UNABLE TO OPEN GROUP POLICY EDITOR


I'd suggest downloading and installing the Server 2003 Administration Tools. There were updates to several over the course of the last two service packs and may fix your problem. They are downloadable via http://www.microsoft.com/downloads. Do a search for Administration tools or adminpak.msi

Jan 23, 2008 | Microsoft Windows XP Professional With...

Not finding what you are looking for?
Microsoft Windows Server Standard 2003 for PC Logo

Related Topics:

101 people viewed this question

Ask a Question

Usually answered in minutes!

Top Microsoft Computers & Internet Experts

micky dee

Level 3 Expert

2635 Answers

Les Dickinson
Les Dickinson

Level 3 Expert

18333 Answers

Brian Sullivan
Brian Sullivan

Level 3 Expert

27725 Answers

Are you a Microsoft Computer and Internet Expert? Answer questions, earn points and help others

Answer questions

Manuals & User Guides

Loading...