Editor Group local policy (gpedit.msc) is a very useful tool for a variety of system settings - it can be used to quickly and easily enable or disable individual components, block or allow certain actions to users. But, unfortunately, at the Home of Windows 7 version, 8.1, 10, the user is faced with the fact that the tool finds. Let's look at how to add GPEDIT.msc in Windows Home 7, 8.1, 10.
- Tool local policies GPEDIT.msc
- What should be done before installation?
- How to install gpedit.msc in Windows Home
- Additional settings for the 64-bit system
- Running tool GPEdit.msc
- What should I do if a message MMC error opening GPEdit.msc?
- ACCESS - [RESOLVED] WHERE IN THE REGISTER OF LOCAL SECURITY POLICY ...
- GPEDIT.MSC WINDOWS 7
Tool local policies GPEDIT.msc
Microsoft deliberately sets Local Group Policy Editor only in Windows Professional versions or above, so that the user does not find its Home. What do you do if the Home version is not found, but for security reasons you need to change the configuration of the OS.
It is possible to install it in the "home" versions of Windows 7, 8.1. 10, where it can help to fine-tune the system. For example, we can quickly enable or disable certain components, such as Windows Defender, gadgets in Windows 7 or in the cloud OneDrive Windows 8.1 / 10, to lock the computer to connect to a home group, ban users access to certain system functions, and so on.
Of course, it's all we can do in the version of Home, but it needs to make some changes to the registry.
What should be done before installation?
Gpedit.msc tool modifies system files and therefore necessarily need to create a system restore point before installing. The fact that this is not the official version gpedit by Microsoft - that is, it is designed not by programmers of the company.
gpedit.msc program has been added to the installation package, which was compiled by the user «davehc» the forum Windows 7 Forums. Theoretically, the package has been prepared for Windows 7, but also proved that it works correctly in Windows 8.1, 10.
How to install gpedit.msc in Windows Home
Download the installation program can be free at DeviantArt site. To find it, go to:
and then click on «Download» on the right side of the site window.
The file will be downloaded in a ZIP archive, unzip it anywhere, such as on the desktop. Setting a fairly standard, simply click on "Next" to complete the installation.
Additional settings for the 64-bit system
If you have a 32-bit system, you do not need to perform any additional actions, but if the 64-bit (more likely), do the following.
You need to copy a folder SysWOW64 multiple files in the System32 folder.
To do this in Windows Explorer go to the directory:
where you will find the following:
GroupPolicy (catalog) ;
GroupPolicyUsers (catalog) ;
gpedit.msc (file) .
Mark these files and folders, right-click and select "Copy."
Then, go to the following path:
Click anywhere on the right mouse button and select "Paste".
Running tool GPEdit.msc
Open the tool can be in the same way as in Windows Professional. To start it, press the key combination Win + R, and then in the "Run", type the following command gpedit.msc, or type it into the search box "Search programs and files" in the Start menu.
After clicking the OK box should open the Local Group Policy Editor.
But sometimes some users in the forums reported that MMC error may appear when you run the command. In this case, follow the instructions below.
What should I do if a message MMC error opening GPEdit.msc?
The error may occur if the user account name is made up of several parts. If the editor does not start and there is a MMC error, it can be eliminated by performing the following steps:
- Reinstall GPEDIT.msc, by running setup.exe. After installation do not close the window by clicking on the button «Finish» - until leave it open.
- In Windows Explorer, navigate to the folder «C: \\ Windows \\ Temp \\ gpedit».
- Here are x64.bat files (64-bit) and x86.bat (32-bit). In the "Open With> Notepad" depending on the type of operating system, right-click on the selected file and select.
- Go to the 6 line, which ends with the following passage in the text:
% the username%: f
- Edit this line, replacing % username%: f on «% username%»: f , as shown below as an example.
You see, a fragment of% username% has to be in quotation marks. Do this for each line that contains this passage. After click on the "Save" button and exit Notepad.
- Then right-click on the changed .bat file and select "Run as administrator".
Appropriate records will be updated and you can now close the installer window gpedit.msc. Window Editor local policy group should open in the Home 7 versions 8.1, 10 without displaying MMC error.
ACCESS - [RESOLVED] WHERE IN THE REGISTER OF LOCAL SECURITY POLICY ...
Group Policy - is the main tool to manage users within the domain. With their help, the administrator can configure virtually any parameters the user's environment. Everything from the ban on certain programs and ending with a picture on the desktop can be set via Group Policy. Policy management is performed at the domain level, and only members of the domain or the Enterprise Admins have access to them.
Is it possible to cancel the effect of Group Policy on a computer without being a domain administrator? Today we will try to find out. As a guinea take the computer with installed on it Windows 7, the domain member. All actions will be carried out under ordinary account that is not available in any domain administrative privileges.
For the use of Group Policy on the local computer in Windows 7 responds Group Policy Client Service (gpsvc). Its state can be viewed directly in Task Manager, on the Services tab.
Or in the Services snap-in (Services).
The first thing that comes to mind - just stop the service and set the startup mode to Disabled. But not so easy as it seems. gpsvc service runs under the local system, and do not stop, do not change the startup parameters of its graphical tooling, we can not.
Alternatively you can use the utility to run psexec Shell on behalf of the system, and then stop the service net stop gpsvc team
But this is a temporary solution. While the service is stopped, and change the parameters of its launch, we still will not be able to, and the next time you restart it will be launched. To change the service startup mode, we need to edit the registry.
Service settings are located under HKLM \\ CurrentControlSet \\ the SYSTEM \\ Services \\ gpsvc . Change the default settings in this section is prohibited, so before you start editing it, we need to get right to it. We click the right mouse button on the partition and select the item "Permissions".
The first thing we need to change the partition of the owner. To do this, go to the Advanced Security Settings, and choose your own account.
Then give yourself full rights and, in any case, remove all the access list.
Now you can return to the service settings. During startup mode corresponds to the parameter Start. The default is 2, which means that the startup mode to Automatic. To disable service set 4.
And further. Thus disabling the Group Policy Client service, you will periodically receive a notification in the system tray of a Windows service is unavailable.
To avoid this, (after saving), you can delete the registry key HKLM \\ SYSTEM \\ CurrentControlSet \\ Control \\ Winlogon \\ Notifications \\ Components \\ GPClient
So here's a simple way you can disable the action of group policies. In this case, it is not necessary to have administrative rights on the domain, it is sufficient to enter the local Administrators group on the computer. The truth is this number can go only on computers with Windows 7 or Vista. In earlier operating systems gpsvc service there, and for the use of Group Policy is responsible Winlogon service.
Oh, I almost forgot. All the steps in the article, I conducted exclusively educational purposes makes such an enterprise network is not highly recommended, where some of it may be fired. And before any intervention in the register be sure to make a backup copy, so that in case something quickly roll back the changes.
GPEDIT.MSC WINDOWS 7
Group Policy Editor (the Gpedit.msc ) - a special mmc console that allows you to control various parameters of the system by editing the predefined settings - policies (on the site there is a section dedicated to Group Policy in Windows). If you dig deeper, in fact gpedit.msc editor is just an interface to manage Windows registry settings, ie Any policy change leads to a change of a key in the Registry Windows 7. There's even a special table of correspondence between Group Policy settings and the settings in the registry. They are called " Group is the Policy the Settings the Reference for the Windows and the Windows Server " (http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=25250). Those. all the settings that are defined using the graphical gpedit console can be set manually to find in this table the required registry key.
However, the Group Policy Management Console is only available in the "older" versions of the OS - version of Windows 7 Ultimate, Professional and Enterprise. If the type gpedit.msc, Windows 7 Home Premium, Home Basic or Starter, then the error will appear on that command not found. Those. Group Policy Editor in these versions do not.
So is it possible to install the Group Policy Editor gpedit in Windows 7 Home ? Fortunately yes (but not trivial)!
To install gpedit.msc in Windows 7 Home we need special patches (unofficial). You can download it here.
Unzip the file and run the installation as an administrator. Installation is carried out in master mode, and is extremely simple.
If you are using 64 bit version of Windows Home or Starter, after installing the patch must also copy the following objects from the directory C: \\ windows \\ SysWOW64 directory C: \\ Windows \\ System32:
- folder GroupPolicy
- GroupPolicyUsers folder
- file gpedit.msc
After installing the update, you must restart your computer and try to run the command gpedit.msc. If all goes well, should open the desired console Group Policy Editor.