Lock Down Windows Desktop Computer Using Group Policy

Поділитися
Вставка
  • Опубліковано 16 гру 2024

КОМЕНТАРІ • 55

  • @Britec09
    @Britec09  4 роки тому +10

    Bunch of people ask for this video, so I hope it helps.

    • @VijayKumarwhatnot
      @VijayKumarwhatnot 4 роки тому

      Thanks for the video, in my office we are having 40+ win 10 pro systems how can I assign policies or rules to all the systems like I do with server os. Thanks in advance.

    • @Britec09
      @Britec09  4 роки тому +2

      You're welcome.

  • @timetriad6199
    @timetriad6199 4 роки тому +4

    This is great for a Kiosk style system, but if applied for the purpose of parental controls, this will make your life more difficult when you need to mange it under your child’s account for troubleshooting and or installing needed apps and so forth.
    Overall, this is still a very good video and very informative. Thanks Britec.👍🏻

  • @lightingman117
    @lightingman117 2 роки тому

    Use MMC to specify the user
    User > admin template >
    control panel > disable access
    system > disable cmd
    system > disable registry
    system > run only specified windows applications
    system > restrict programs from help
    system > removable storage > disable all
    system > ctrl+alt+del options > remove task manager
    local > computer config
    windows > security > software restriction > additional rules > new hash rule > disallow + add powershell
    admin > windows components > windows update > no auto restart with logged-on users

  • @abdullahquhtani4247
    @abdullahquhtani4247 4 роки тому

    Is it possible to make all these restrictions then copy those rules and apply them on another computers instead of doing them manually for each one. I have about 50 PC’s in my company and that’ll be a hard task to do that for each PC.

  • @frankdenunzio4184
    @frankdenunzio4184 4 роки тому

    Great tips for securing Windows! Thanks for all of your videos. They are informative, clear and very civilized!

  • @remontadros8538
    @remontadros8538 2 роки тому

    question please I am trying to create Kiosk PCs that will run Citrix and I want to lock the taskbar from showing at all even if the user pressed on the start menu. Is that possible?

  • @wizlon6757
    @wizlon6757 4 роки тому +2

    Just a quick FYI, it is possible to enable gpedit in Win10 home it just doesn't come as standard.

  • @injuneer7942
    @injuneer7942 2 роки тому

    It's a great tip BUT what to do if you have been locked out of Group Policy? As I applied your solution, after the 2nd line I get a message "access denied" .... suggestions?

  • @Richie016
    @Richie016 4 роки тому

    Accessing admin user features to workaround windows functionality
    provides the advantage of managing windows controls and privacy.

  • @1Bosh777
    @1Bosh777 2 роки тому

    Hello I wish you can assist me with Block Taks Scheduler --it never worked for me--even with Software restrication or the way you used ---Please advise!!! thx

  • @mrpush2532
    @mrpush2532 2 роки тому

    Is there no just a template I can use to lock everything down the adjust as I need it?

  • @kameshking6221
    @kameshking6221 4 роки тому

    U can use MMC for specific user lockdown. Admin account only access full control. Try that option

  • @jasonlin4591
    @jasonlin4591 3 роки тому

    I follow your video block these things but When I use my administrator to log in I can’t open Cmd and other things too?

  • @FredAyebare-r6m
    @FredAyebare-r6m Рік тому

    Ayo dude ....like what ye do ... I tried out this group policy feature to allow access to only selected programs but didnot include the exe file for thos very edit group polocy thing... Could there be any way to get it back normal without reinstalling windows. ..trust your ass you gat it

  • @JamesEscobar
    @JamesEscobar 4 роки тому

    Excellent topic and video!

  • @nickbrown4762
    @nickbrown4762 4 роки тому

    Very informative video. Thank Brian.

    • @Britec09
      @Britec09  4 роки тому

      Glad it was helpful!

  • @bobmusikk
    @bobmusikk 4 роки тому

    I've been watching your videos for a while, thank you. May I ask what's the phrase you say at the beginning of each video? I hear "watch you guys" :)

  • @BuildTimeMC
    @BuildTimeMC 3 роки тому

    Run only specified program is not working,
    It still let's me access file explorer and contorll panel

  • @okyanusozsahin3439
    @okyanusozsahin3439 4 роки тому

    Nice video! Thanks SO MUCH Brian.

    • @Britec09
      @Britec09  4 роки тому

      Glad you liked it!

  • @RRan-dk7ct
    @RRan-dk7ct 4 роки тому

    Thanks.....I wonder why i only have 3 option in (Local Group Policy Editor-User Config-Admin Temp-Windows Component-Windows Update....Only 3 Options in the Setting....I see you have Just About a full Page?????

  • @ManojKr-rb8jz
    @ManojKr-rb8jz 4 роки тому +1

    Really useful thanks 😊

    • @Britec09
      @Britec09  4 роки тому

      You're welcome 😊

  • @revinot
    @revinot 4 роки тому

    How can you roll this out to multiple computers on a domain, without doing it one PC at at time?

  • @johnksss
    @johnksss 3 роки тому

    My question is this..... After doing all this, does it block the Administrator account from having full access? If so, what is the work around for that? Thanks

    • @r0m3o5k
      @r0m3o5k 2 роки тому

      Nah the restrictions are supposed to be on another windows user profile. @11:36

  • @rinserepeat2877
    @rinserepeat2877 4 роки тому

    Britech, will this help if I believe someone is remotely accessing my one and only home computer? I'm the only one using it as admin. Thanks so much good videos, R'

    • @Quantum_Prophet42
      @Quantum_Prophet42 4 роки тому +1

      I would suggest you do the following
      1) Run an anti-virus scan on the computer. I would suggest using Windows Defender, and then another reputable anti-virus of your choice to run the scans.
      2) Run Malwarebytes. Make sure the "Scan for Rootkits" option is enabled.
      3) Run Hitman pro to make sure nothing else was missed
      4) Create another user account on the computer and make a Standard account, not admin. Use this account for all you daily work and internet browsing.
      If you do the above steps and find nothing, but still feel someone is remotely accessing your computer, then back up all you important files and do a clean install of Windows. I highly recommend still creating two accounts, one admin to only do maintenance on the computer and one standard to do your daily work.

  • @bobbuilder8855
    @bobbuilder8855 3 роки тому

    Very useful for preventing children mindlessly running .exe files.

  • @naeem8434
    @naeem8434 4 роки тому

    Amazing video

  • @a.rahamathullahameeth1385
    @a.rahamathullahameeth1385 3 роки тому

    Sir how to block Ctrl p option by using gpo

  • @tg9460
    @tg9460 4 роки тому

    Awesome. Thank you.

  • @johnsenchak1428
    @johnsenchak1428 4 роки тому +3

    Posted on Facebook, Bye for now Cheers

  • @bumberClart1000
    @bumberClart1000 4 роки тому

    Wotcha Bri 🤗

  • @amarn3269
    @amarn3269 4 роки тому

    Thanks, very helpfull

  • @herbbie660
    @herbbie660 3 роки тому

    you cant do this security on windows home? why not?

    • @herbbie660
      @herbbie660 3 роки тому

      that bs.. mann i got hacked and have windows home

  • @darkmatter8650
    @darkmatter8650 4 роки тому

    I'm Dark Matter on commenting.Sort them as new comments.

  • @charlesmiller000
    @charlesmiller000 4 роки тому

    No help for Win10 Home users

  • @sanilalkuttimon1755
    @sanilalkuttimon1755 4 роки тому

    😍

  • @patrickcadette
    @patrickcadette 4 роки тому +1

    😁😁😁👍👍👍

  • @darkmatter8650
    @darkmatter8650 4 роки тому

    Check and Reply from my Comments, Please-Soon....Thanks.(Dark Matter)

    • @Britec09
      @Britec09  4 роки тому

      what comments, I get 1000s every day