1. #1
    2xg's Avatar
    Join Date
    Apr 2012
    Location
    SoCal
    Posts
    336
    Blog Entries
    13

    Local Security Policy for Windows 7 Professional and Above Versions

    I have compiled some tips on how to secure/protect, restrict and/or change restrictions from the computer(s) in your network. If you have a Workgroup or HomeGroup setup in your Network, you may use the Local Security Policy using a Windows 7 Professional or above versions to do all of these.

    Pre-requisites:
    You must add all the Users (Identical User Names and Passwords that are assigned on each computer) in your network that you wish to give restrictions to.
    You must have an Administrator privilege.

    To access Local Security Policy, click on the Start button/orb and type Local Security Policy then press enter or click on the top to access Local Security Policy.



    I will show you a couple of things that might be useful, you may navigate and see what other things you may be able to utilize and modify. Practice, be aware, make some notes and remember all the changes that you are about to make.

    If you wish to disable the elevation prompt when an application installation packages are detected, you may go to Local Security Policy>Security Settings>Local Policies>Security Options> then double click on User Account Control: Detect Application Installations and Prompt for Elevation, Disable this policy.



    If you wish to use the advanced firewall option and open up Ports and use the Inbound and Outbound Rules, you may go to Local Security Policy>Security Settings>Local Policies>Windows Firewall with Advanced Security> double click on User Firewall Inbound and Outbound Rule, make all the necessary changes.



    If you wish only certain Users to access a computer, go to Local Security Policy>Security Settings>Local Policies>double click on User Rights Assignment and double click on Allow Log on Locally, then add the User(s). Note: If a User can't remote access a computer in your network, make sure that you add the User in question in this Policy.



    If you want only certain Users to remote access your computer, go to Local Security Policy>Security Settings>Local Policies> double click on User Rights Assignment and double click on Allow logon to remote desktop services, then add the User(s). Note: You may remove the Administrators group and leave the Remote Desktop Users group and only add Users that require remote access if needed and for security purpose.



    If you do not want Users in your Network to install printer drivers on any shared printers go to Local Security Policy>Security Settings>Local Policies>Security Options> double click on Devices: Prevent users from installing printer drivers when connecting to shared printers, then Enable this policy then add the User(s).



    Important Note: Please know the consequences of some modifications that you have to make, the good news....you may always undo them. A System Restore is an option (if you can't remember what mistakes you've made) which would take you back when things were fine.
    Last edited by 2xg; 04-21-2012 at 12:40 AM.
    zigzag3143, Laxer, Corrine and 3 others say thanks for this.



    • Ad Bot

      advertising
      Beep.

        
       

  2. #2
    Laxer's Avatar
    Join Date
    Feb 2012
    Location
    Portland, OR
    Posts
    3,845
    • specs System Specs
      • Motherboard:
        GIGABYTE GA-Z97MX
      • CPU:
        Intel 4690K @ 4.6Ghz
      • Memory:
        Corsair Vengeance Pro 16GB @ 2666Mhz
      • Graphics:
        2x Sapphire 7970s
      • Hard Drives:
        2x Corsair Force 3GT 120GB (RAID 0) + 2x Western Digital Red 3TB (RAID 1)
      • Disk Drives:
        LG Black 10X Blu-ray Burner
      • Power Supply:
        CORSAIR 950HX
      • Case:
        Corsair 350D
      • Cooling:
        Corsair H100i
      • Display:
        3 x 22" Samsung 1080p Displays
      • Operating System:
        Windows 8 Pro x64

    Re: Local Security Policy for Windows 7 Professional and Above Versions

    Great post Rayda!

  3. #3
    2xg's Avatar
    Join Date
    Apr 2012
    Location
    SoCal
    Posts
    336
    Blog Entries
    13

    Re: Local Security Policy for Windows 7 Professional and Above Versions

    Thanks Geoff,

    I just finished editing it, all good to go. Hopefully, it will be useful.


  4. #4

    Join Date
    Mar 2012
    Posts
    469

    Re: Local Security Policy for Windows 7 Professional and Above Versions

    Awesome job. Btw, in regards to restricting remote access users, isn't there a default group for Windows 7 that is for remote desktop which any user added to it will have access? Seems somewhat easier to do it that way.

  5. #5
    2xg's Avatar
    Join Date
    Apr 2012
    Location
    SoCal
    Posts
    336
    Blog Entries
    13

    Re: Local Security Policy for Windows 7 Professional and Above Versions

    Hi Vir Gnarus,

    It's an excellent question to ask. Yes, itís true, but the purpose of Local Security Policy is to give more restrictions to the Users in your network. I should have mentioned that Administrators by default can remote access, you may remove the Administrators group and leave the Remote Desktop Users group and only add Users that require remote access using the Local Security Policy.

    Also, if someone is having an issue in Remote Desktop Connection, along with 'Allow log to Remote Desktop Services' to the User make sure that 'Allow Log on locally' (which is also in my Post) is also permitted. I have used this a couple of times and it worked for me.
    This is something that I can add to my post later on. Thanks for your feedback.

    Edit: Changes from my initial post has been made.
    Last edited by 2xg; 04-21-2012 at 12:41 AM.


Similar Threads

  1. [SOLVED] Hyper-V Windows XP x64 Professional - Internet Connection
    By AceInfinity in forum Networking
    Replies: 16
    Last Post: 04-07-2013, 10:48 AM
  2. Watchdog Errors - Windows 8 Professional x64
    By Megalith in forum BSOD, Crashes, Kernel Debugging
    Replies: 8
    Last Post: 12-06-2012, 02:46 AM
  3. Local image file use for Windows 8 apps explained
    By JMH in forum Microsoft News
    Replies: 0
    Last Post: 07-25-2012, 03:38 AM
  4. Group policy update comes to Windows 8
    By JMH in forum Microsoft News
    Replies: 0
    Last Post: 05-16-2012, 07:01 PM

Log in

Log in