Changing the Windows Xp with gpedit.msc
Computers with more than one user almost always in need of restrictions that prevent the change settings or access to certain features of the operating system. A tool that is quite accurate for this is the gpedit.msc, available in the latest versions Windows. This tutorial will explain how to use it in Windows XP and will show, for example purposes only, some restrictions on the Start menu, on the Desktop (Desktop), in the Control Panel and in the other resources.
Before you start
The tool gpedit.msc should be used with caution, since it is possible to prevent the operation Windows. Do not enable certain features if it is not some of what you’re doing. Each possible change to the has an explanation in the corresponding window. See-the in case of questions or ask help to someone more experienced.
The instructions available here were tested by the DigoPaul on more than one computer. However, by the the complex nature of computers, this web site can not ensure all the procedures will work perfectly on your computer, or that will not cause damage. So, when you use with this tutorial, you must agree that the DigoPaul is not responsible for any problems or unwanted change that might happen on your machine.
When you use the gpedit.msc
The gpedit.msc is a resource available users with administrator privileges, and serves to block or alter a number of features of the Windows (not is available for the Home version of Windows XP). Its use is indicated in computers with more of a user, where it is necessary to make certain restrictions to ensure the operation of essential functions of the machine. However, it is important to note that all of the users, including the administrator, will be affected by the restrictions. When the administrator needs to be some resource blocked, you can temporarily disable the gpedit.msc. This will be explained later.
In places where there are networks of computers, the systems administrator usually makes such machines make logging in to a domain (a kind of group of computers – managed servers), and load the existing restrictions of a server. The advantage of this is that the administrator can have more control of the activities of each machine and need to do the settings on the server only. When any change is made, all computers on the network will receive it.
However, there are situations where, for some reason, it is not possible to make the computers logging in to a domain. In this case, it is necessary to the creation of restrictions on each machine. It is at this point that the gpedit.msc can be used.
Another situation: many users may need to block or alter one or another feature of your personal computer. The gpedit.msc is an excellent option for you this case.
Starting to use the gpedit.msc
The easiest way to access the gpedit.msc is going on Start / Run and typing gpedit.msc. This command can also to be entered in the Command Prompt.
Typed the command, a window of name “Group Policy”. This has two divisions. The one on the left contains the options, the content of which is displayed to the right when extended.
As shown in the previous image, usually appears an option to the left of name Policy The Local Computer with two sub-items expandable: Configuration computer and Configuration user. In this tutorial, we’ll rely on this last for your options to be more interesting.
By clicking on the signal positive (+) at the beginning of User configuration, the three sub-expandable items appear:
– Software settings: usually this option allows for the configuration software provided by third parties. It is little used;
– Windows settings: it allows the activation script to be run at startup computer; allows you to change the security settings; allows changes to the Internet Explorer;
– Administrative templates: this is the item with the most features and that will be used in this tutorial. It allows you to a number of configurations that are stored in extension files .adm. These, in turn, are based on its settings directly in the Registry Windows.
User configuration / Administrative templates
By clicking on the thumbs-up at the beginning of Administrative Templatesa string sub-items appear, the most common being:
– Start Menu and taskbar;
– Area of work;
– Control panel;
– Shared folders;
– Windows components.
The name of each item above makes it clear where it is possible to make changes. Simply select any of the options and your content will appear on the side the right of the window. The figure below shows the items that appear when Start Menu and taskbar is selected:
It is possible to notice that by clicking in each item, a series of settings can be made. The amendment process is very simple and is the same for the majority of the items. Even those who differ do not present high degree of difficulty.
As an example, let’s say that you want to prevent access to the tool regedit.exe that allows access to the The Windows registry. To prevent its functioning it is necessary to to know where is your location. You see, the regedit not part of the Start Menu, therefore will not be in Start Menu and taskbar. Of the same way, the regedit is not part of the Panel Control, a lot less of the option Network. This makes it clear that he can be in two options: System or Windows components.
As shown in the figure below, it is in Systemin the item Prevent access to Registry editing toolsin partright. To change it, just give two clicks with the button left-click on the item. In the window that appears, simply click on the guide Configuration and choose one of the three options and click on OK: Is not configured, Enabled, Disabled.
The default is Not configured that indicates that that item loads the option standard Windows, which in our example is to allow access to the regedit. If you click Enabled the feature Prevent access to editing tools Registry will operate and, therefore, access to the Windows registry will be prevented. How is it that we want, simply select this option and click OK. After you Go in Start / Runand type regedit. Note that Windows displays an error message and prevent access to the tool:
If you choose Disabled, the option in question will be a setting disabled in Windows, ie, it will not be possible apply it on the system.
Note that in the same window there is a tab name Explain. It is important because contains a small text that indicates what the option chosen offers.
It is possible to notice that almost all the available settings can be changed in this scheme “is Not configured, Enabled, and Disabled.” However, depending on the feature, there is something more to be done.
For example, it is possible to prevent the Windows to run certain applications. Imagine that you want to prevent the execution of the file digopaul.exepresent in C:\Windows\. For this, the path is the following in gpedit.msc: User configuration / Templates administrative / System and, to the right, Notrun Windows applications specified. In the window that appears you must click on Enabled and then in the button Show / Add… and inform the path file: C:\Windows\digopaul.exe. Finally, the user must click in OK until you close all the options.
In this topic we will do some settings to show the ability of the gpedit.msc:
Example 1: preventing the change wallpaper
The wallpaper is located in the Area of Work, soon it is this option that we should look for in gpedit.msc, right? In theory, yes. However, Microsoft chose to put this item in the following path: Administrative templates / Control panel / Display. In the area of right, just activate the item Prevent change wallpaper. It is important to note that, even with this feature enabled, it is possible that some programs can to change the wallpaper. It is the case of Microsoft Office Picture Manager, which is included in the package Office 2003.
Example 2: removing the Shut down button from the Start menu
This configuration is more simple, just go in Administrative Templates / Menu Start menu and toolbar and in the right area enable the option To remove and prevent the access to the command ‘Off’.
Example 3: preventing the execution Windows Messenger
For this configuration, you should go in Administrative templates / Windows Components / Windows Messenger. To the right, you should enable Not allow Windows Messenger to be run. Important: this setting does not prevent the operation of the MSN Messenger.
Example 4: hiding the C:drive
This is a more laborious, but not complicated: it should go in Models administrative / Windows Components / Windows Explorer. The the right to choose Hide these units specified in ‘My computer’. So that the option Enabled is chosen in this item, a menu will appear asking you which drives you want to hide. Is possible to make various combinations. In our case, we will choose Restrict drive only C. Important: this feature works for up to 4 partitions. If you have more, the other will not appear and may not be hidden.
This is a feature that is accessible by the Control panel, soon, you must follow the following path in gpedit.msc: Administrative templates / control Panel / Add or remove programs. In the right area, you must activate the option Remove programs from ” Add / Remove programs.
Disabling the gpedit.msc temporarily
As already said, the restrictions the gpedit.msc will reach all users of the computer, including those with administrator privileges. Users of this category can disable the gpedit.msc temporarily, ifrequire some resource to be locked.
For this, in the window of the gpedit.msc, click Policy The Local Computer with the right mouse button, select Properties and check the following boxes: To disable computer settings and Disable user settings. Click Ok and wait a few moments for the gpedit.msc to release their restrictions (in some cases, you can be necessary to restart the computer or log off). Clear the boxes in question to re-enable gpedit.msc.
The gpedit.msc is a tool that allows you to do a large amount of settings. Are so that this tutorial would be tiring if every one of them were mentioned. However, the text made it clear that the secret is to identify where the desired configuration will be made and look it in the corresponding area of gpedit.msc. For example, if you want to change some characteristic of the Start menu, you know thatit is very likely that such a configuration is in Administrative templates / Start Menu and bar task. In contradiction, the sample 1 of the topic the previous shows that is not always the case. Certain items may not be in the place that it seems obvious, therefore, is necessary to look and test. With practice, soon you know all the possibilities of gpedit.msc, including the items not explored in this tutorial (Setting of the computer).