Group Policy Editor

ed black wrote:

snipped for length


The microsoft H&S files written in the OS and supplied with thexp MCE
OS say this can be done.

You continue to bark up the wrong tree.

I GET THERE AND THE FOLDERS EMPTY --- no "Software Installation"
node in the "Software Settings" Folder.

You and I can yell and shout all we want. It doesn't change this
fact. Forget about my 3d party software that doesn't run. That's no
longer the issue, explain the issue with the empty "Software
Settings" Folder.

In a *local* policy this does not exist. It certainly exists in *domain*
policies....and I've already agreed that help & support in XP is incorrect
here. I'm sure Microsoft has been made aware of this - it isn't the first
time it's happened.

Or do you even care that there's a flaw in the MS component? Is it so
trivial, that I as an End User shouldn't be concerned about it.

What "component"? You're talking about a badly-written help file, not group
policy itself.


You're probably right, I probably shouldn't mess with the Local
Policy or the Group policy,

That's correct - and you don't *have* a "group" policy. You are not
administering a domain.

But like I said, there's a problem with
the GPE. I understand that xp mce is obsolete and Vista is the
latest flavor, but at least recognize there's a problem with the
GPE. You can't deny it, I can supply screenshots or whatever.

Vista, MCE, XP, it doesn't matter. This is a permissions issue in the
registry and file system, plain and simple, and cannot be addressed via
policy....period.



Good Day, And you don't need to reply again if you're going to skirt
the issue of the flawed GPE.

(sigh)

The policy editor isn't the problem. I have my own XP box here & it's the
same. When I work with policies in a domain environment (which MCE can't
even join, mind you) I have these options available to me. Misleading? Yes,
I can see that - but only if you're looking at group policy help files,
which concern a topic entirely irrelevant to your original post.

Again: even in a domain this is not how one handles a situation like yours,
which involves modifying permissions in the filesystem and registry to
permit non-admins to run badly written third party apps Software
installation has nothing to do with this - nor does software restriction
(another area you wouldn't want to mess with).

I've done my best to direct you in the right direction but it is becoming
evident you aren't all that interested in fixing the actual problem that
caused you to write your post in the first place, which you surely could
have done by now if you'd investigated the Sysinternals tool and modified
your permissions. If you can't figure out how to change the permissions
(which is a fairly basic task in Windows!) you would definitely not want to
get involved in policy settings or you will end up with an unusable
computer.

I'm now done - I wish you luck in solving your problem.

Okay I finally came across the disclaimer in the help files

" . . . because Group Policy can have snap-in extensions added to or removed
from it, the exact set of subitems that you see might be different."

then I came across this item

http://support.microsoft.com/kb/555218/en-us

I followed the directions and the system confirmed that the extension was
successfully registered. There was still no "Software Installation" subitem
when I restarted the GPE.

Then I found this

http://technet.microsoft.com/en-us/l.../bb742376.aspx

Still didn't work after I followed the directions and added the snap-in and
all extensions. Strangely enough, the Software Installation snap-in
extension was included in the check box for adding extensions. I did the
restart and everything.



I'm resigned that I can't operate the GPE for user configuration of software
installation.

I do however suspend belief that the Snap-In won't work for me on this
computer until I see for myself if it works or not, but since it's not
available for me to attempt, then I won't say it can't work or will work for
my purposes to allow limited users to run some apps. I admit I'm a novice
end-user and for what it's worth I do respect your knowledge, experience and
wisdom. It's just that I need to experience for myself whether or not the
GPE will resolve my issue.

That being said, I have to start looking for the tutorials on what you've
described by editing registry and learning NFTS. I don't have time right
now, so I'm going to have to live with fast user switching to go from the
limited accts to admin when I need to check the weather or do screen captures
and uploads to image sites. I've also discovered that the FPS multiplayer
online game that I use can only be run in admin anyway because of the
PunkBuster Anti-Cheat requirements.

ed black wrote:
Okay I finally came across the disclaimer in the help files

" . . . because Group Policy can have snap-in extensions added to or
removed from it, the exact set of subitems that you see might be
different."

then I came across this item

http://support.microsoft.com/kb/555218/en-us

I followed the directions and the system confirmed that the extension
was successfully registered. There was still no "Software
Installation" subitem when I restarted the GPE.

Then I found this

http://technet.microsoft.com/en-us/l.../bb742376.aspx

Still didn't work after I followed the directions and added the
snap-in and all extensions. Strangely enough, the Software
Installation snap-in extension was included in the check box for
adding extensions. I did the restart and everything.



I'm resigned that I can't operate the GPE for user configuration of
software installation.

But *installation* isn't your issue anyway, though. You'd have the same
problem, as the installers for your applications are not doing what they
should do, which is set permissions accordingly so that end users can use
them.

I do however suspend belief that the Snap-In won't work for me on this
computer until I see for myself if it works or not, but since it's not
available for me to attempt, then I won't say it can't work or will
work for my purposes to allow limited users to run some apps.

OK, don't say it. I will. That is not what it is for.

I
admit I'm a novice end-user and for what it's worth I do respect your
knowledge, experience and wisdom. It's just that I need to
experience for myself whether or not the GPE will resolve my issue.

Sure, go to town.

That being said, I have to start looking for the tutorials on what
you've described by editing registry and learning NFTS. I don't have
time right now, so I'm going to have to live with fast user switching
to go from the limited accts to admin when I need to check the
weather or do screen captures and uploads to image sites. I've also
discovered that the FPS multiplayer online game that I use can only
be run in admin anyway because of the PunkBuster Anti-Cheat
requirements.

I'm really not sure what you're looking for where "how to change
permissions" is concerned or I would happily have given you a link. This is
really pretty basic stuff - it's been pretty much the same since NT first
came out. Google should help.

Good luck out there....