Page 2 of 3 FirstFirst 123 LastLast
  1.    12 Jul 2017 #11
    Join Date : Aug 2015
    Posts : 88
    Windows 10 pro 64bit

    Quote Originally Posted by macster2075 View Post
    right.. as I mentioned on my previous post. Doing that actually disables access to regedit to everyone including admin accounts. I do not want to do that. I would like for it to prompt me for the admin password when I try to access it when logged in as a regular user...the same way gpedit.msc is setup.... I cannot access gpedit.msc as a regular user unless I enter the admin password.
    You should be able to change the enforcement policy to users only

    Policy Enforcement Options

    There are two policy enforcement options that influence the behavior of a software restriction policy. The following options define how software restriction policies are applied for all files, including signed files:

    Apply software restriction policies to the following: All files. This option includes dynamic-link libraries (DLLs).

    Apply software restriction policies to the following users: All users except local administrators. This option prevents the software restriction policies from applying to local administrators.
      My ComputerSystem Spec
  2.    12 Jul 2017 #12
    Join Date : Jun 2016
    Posts : 23
    Win 10 Pro
    Thread Starter

    How would do this? and why isn't this done by default?.. regular users should NEVER be allowed to have access to regedit.
      My ComputerSystem Spec
  3.    12 Jul 2017 #13
    Join Date : Aug 2015
    Posts : 88
    Windows 10 pro 64bit

    Quote Originally Posted by macster2075 View Post
    How would do this? and why isn't this done by default?.. regular users should NEVER be allowed to have access to regedit.
    It's in the actual "Software Restriction Policies" folder in GPedit Right click "enforcement" and select properties.
      My ComputerSystem Spec
  4.    12 Jul 2017 #14
    Join Date : Jun 2016
    Posts : 23
    Win 10 Pro
    Thread Starter

    This is the way I have the settings right now.. they look to me as if it should be asking for admin credentials when a regular user tries to open regedit.. am I right, or do I need to change anything here?
    Attached Thumbnails Attached Thumbnails Enforcement.PNG  
      My ComputerSystem Spec
  5.    12 Jul 2017 #15
    Join Date : Jun 2014
    USA
    Posts : 1,595
    Windows 10 Pro x64

    Don't feel like experimenting on my machine but wouldn't limiting Admin rights prevent registry changes? In other words, a user who doesn't have admin rights shouldn't be able to edit the registry.

    Or are you trying to limit those who have admin rights?
      My ComputersSystem Spec
  6.    12 Jul 2017 #16
    Join Date : Jun 2016
    Posts : 23
    Win 10 Pro
    Thread Starter

    Quote Originally Posted by sygnus21 View Post
    Don't feel like experimenting on my machine but wouldn't limiting Admin rights prevent registry changes? In other words, a user who doesn't have admin rights shouldn't be able to edit the registry.


    Or are you trying to limit those who have admin rights?
    Not at all..what I am saying is that regular user accounts that do NOT have admin rights have access and are able to edit regedit.exe.

    What I am trying to do is force regular users to be prompted to enter the ADMIN password in order to open regedit.exe...I am NOT trying to disable it completely from regular users.

    I have never seen this before in any other Windows OS.. regular user accounts have never been able to open regedit.exe without first entering the admin password.
      My ComputerSystem Spec
  7.    12 Jul 2017 #17
    Join Date : Jun 2014
    USA
    Posts : 1,595
    Windows 10 Pro x64

    Quote Originally Posted by macster2075 View Post
    Not at all..what I am saying is that regular user accounts that do NOT have admin rights have access and are able to edit regedit.exe.

    Hmmm.... that's weird. I would have thought this access limited by privileges set.

    What I am trying to do is force regular users to be prompted to enter the ADMIN password in order to open regedit.exe...I am NOT trying to disable it completely from regular users.

    Got it. BTW for clarity.... who are "regular users"? Do they have admin rights?. I know you indicate above, regular users don't have admin rights, but...

    I have never seen this before in any other Windows OS.. regular user accounts have never been able to open regedit.exe without first entering the admin password.

    Why I'm surprised Windows 10 would allow it. We are talking about Windows 10, right?

    Also, which version of Windows 10 do you have - Home, Pro, Enterprise/Education?
    My reply in red.
      My ComputersSystem Spec
  8.    12 Jul 2017 #18
    Join Date : Jun 2016
    Posts : 23
    Win 10 Pro
    Thread Starter

    Quote Originally Posted by sygnus21 View Post
    My reply in red.
    what I mean by regular users are ALL users that are NOT administrator accounts.
    If you create a new user on your PC (non admin), you will see that you can type "regedit" in the search bar and you will be able to open regedit.exe without any UAC prompt at all.. it will go straight in.
      My ComputerSystem Spec
  9.    12 Jul 2017 #19
    Join Date : Jun 2014
    USA
    Posts : 1,595
    Windows 10 Pro x64

    Well I expect this anyway since I've got admin rights. But I get your point. Anyway I've go no suggestions at this moment. Was just curious.

    Let us know what you find.

    Peace
      My ComputersSystem Spec
  10.    13 Jul 2017 #20
    Join Date : Aug 2015
    Posts : 88
    Windows 10 pro 64bit

    Quote Originally Posted by macster2075 View Post
    This is the way I have the settings right now.. they look to me as if it should be asking for admin credentials when a regular user tries to open regedit.. am I right, or do I need to change anything here?
    That would block the software (in additional rules etc) from running. full stop. As you have blocked all users including Admin. why would it bring up an admin prompt for software admin can't run? you would need to exclude admins. and retry.

    As for "standard users" running configuration software as per Microsoft : Standard accounts can run most software and are allowed to change system and account settings.

    you are ideally looking for a "limited user account" (domain/enterprise features) or a "Child account" (as linked child accounts can be very limited as to what they can execute)
      My ComputerSystem Spec

 
Page 2 of 3 FirstFirst 123 LastLast


Similar Threads
Thread Forum
Solved How to move User Folder and Restrict Access to other Drives/Partition
Hi, everyone. I just recently joined this forum with the intent of getting help in setting up a new computer. I've done a fair share of research in this (and other) forum, but the variety of solutions I found left me confused more than ever. I...
Installation and Upgrade
restrict user to run only a few applications Windows Home edition
Hi. I created a user name titled "Visitor". How can I (without a lot of registry changes) allow Visitor to run only 5 or 6 applications. I have created a unique desktop for Visitor with only those icons. Visitor is not a family member. Or...
Software and Apps
How to restrict wi-fi internet access to kids?
Hi, At home we access to the internet wirelessly by means of a modem-router TP-Link Archer MR200, through a SIM and 4G link. The problem is that after the first connection the wi-fi network key of the modem-router remains memorized in the device...
Network and Sharing
Restrict program access and startup for second user?
Is there any easy way to restrict program access and startup for second user? I need to share my pc for a short time, and would want to restrict what programs show in startmenu and start at boot. Tried a new local account and new family member,...
User Accounts and Family Safety
How to restrict standard user access to folders
On my secondary hard drive, I have some folders that I don't want standard users to see or access. How can I go about doing this? Thanks!
User Accounts and Family Safety
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 22:55.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums