Windows 7 x64 Pro Group Policy Restrictions Reversal
-
08 Ağustos 2012 Çarşamba 14:22
Dear All,
I have setup Group Policy in Windows 7 x64 Professional.
In it I have edited "Run only specified Windows applications" to restrict use of my machine.
Now I want to add/remove some applications, but Windows is not allowing me to do so.
Perhaps I have not included gpedit.msc in the list.
I have searched Internet and found nothing useful.
The computer machine is standalone and isolated. It is not connected to internet nor part of any network and/or domain.
Please advise possible solutions to this problem.
Awaiting your support.
Many Thanks,
Jawwad
Tüm Yanıtlar
-
08 Ağustos 2012 Çarşamba 18:30
What is the response of system?
Rgds
Milos
-
09 Ağustos 2012 Perşembe 04:48
Thanks for your attention Milos.
Please tell in what terms you are asking "Response of System"?
System runs smoothly but only allows 4 applications that I have added in the Policy Editor to run.
All other auto start applications run as usual.
If I try to run gpedit.msc from start menu, it gives the following error. I tried running gpedit.msc as Administrator but the result was same.
All the programs generate this dialog box.
The Logged in account has administrator privileges.
I also tried with other administrator account, but the result was same.
Awaiting your comments.
Thanks and Best Regards,
Jawwad
Jawwad
-
09 Ağustos 2012 Perşembe 07:52Moderatör
-
09 Ağustos 2012 Perşembe 13:39
Hello Juke,
Thanks for your kind response. The problem is I am unable to open/execute any application/program in the Windows.
I used gpedit.msc to change the policy. I haven't used Applocker Rules. Furthermore I am not able to run gpudate.exe
Please guide me how to restore this group policy for Windows 7.
If you know any tool by Microsoft which can allow me to run gpupdate/force command, please let me know as I am new to such tools.
Thanks in Advance,
Jawwad
- Düzenleyen Jawwad.haq 09 Ağustos 2012 Perşembe 13:52
-
10 Ağustos 2012 Cuma 03:47Moderatör
Hi,
According to your description, seems you have locked yourself by Software Restriction and most of command and executable files are restricted to run. You may try to delete the file mentioned in my previous reply and reboot to check whether GP engine will refresh the policies. If not, I am afraid you may need to make a new installation.
Juke Chou
TechNet Community Support
-
11 Ağustos 2012 Cumartesi 21:25
Hello,
The GP engine was not able to refresh the policies.
Anyways thank you very much Juke Chou and Milos Puchta for your kind and friendly support at this forum :)
I appreciate and respect your kind attention towards my thread.Since I had database stored in C Drive, I was not risking new installation.
I sorted out ( with the help of people like you in the net) another way of resetting the Group Policy and it worked for me and saved me from a big trouble.
I am new at this forum and thus I do not know if sharing that procedure is acceptable here or not.
Dear Mods,
If you find that procedure not in compliance with the Microsoft or this forum, please remove that.
I am sharing here because it helped me.
so here it goes:
Use Windows 7 install or recovery/restore disk to boot from
get into Command Prompt and identify your OS install partition via diskpart utility and then using "list volume" command and then use exit command to exit from diskpart utility
After that perform the following commands:
RD /S /Q "X:\Windows\System32\GroupPolicy" Press Enter
RD /S /Q "X:\Windows\System32\GroupPolicyUsers" Press Enter
Please remember to replace "X" with your identified OS install Partition
Also please note that it will reset all group policies to default.
After that restart your System , the group policy is reset now.
In the end Bundle thanks to both of you and of course the people behind this forum.
Have a nice time :)
Best Regards,Jawwad
- Yanıt Olarak İşaretleyen Juke ChouMicrosoft Contingent Staff, Moderator 14 Ağustos 2012 Salı 11:54
-
13 Ağustos 2012 Pazartesi 06:43Moderatör
-
14 Ağustos 2012 Salı 07:15
Hi,
Yes it perform the same procedure but the Policy Restrictions were not allowing me to do so, that is why I have to go that way. :)
Thank you again for your kind support :)
With Best Regards,
Jawwad