Enable firewall with GP but allow users to disable....

I'm wondering how I can enable the firewall in group policy but allow a user to disable it if they have to.  I see that it says "settings are controlled by group policy" when I go to try to turn it off on a vista machine.  Thanks.

Hi,
 GPOs do not provide this functionality unless you are using the special group policy preferences settings which do not include control over the firewall. You best bet is probably to simply deploy the OS with the default setting of the firewall being
active and this would allow any local administrator to change the configuration.
 Alternatively, you could dig down and determine the registry keys to control the firewall and change those with group policy preferences.
Thanks,
Guy

Similar Messages

  • Not allow users to disable startup script

    I have written a User Login script for indesign and have successfully implemented in Indesign CS3. However, anyone can disable the login script that I have put in the Startup script by modifying the Preference setting of the Indesign.  I would be very grateful if any one there could suggest me on how to not allow the users to disable the login script put inside the Startup Script folder.
    Thanks,
    Limbu, Keshar

    Thank you very much for you response. But, it is not about the user right permission. There is a selection options in the Perference setting of Indesign. If you untick that option, Indesign will run bypassing the scripts in the startup scripts folder. Is there any way to not allow the users to not select this option so that the startup scripts does not get bypassed?
    In the above preference setting the last check box is not selected hence Indesign will bypass all startup scripts. Only if this last option is selected the startup scritps will run.
    Thanks
    Limbu Keshar

  • Fix Array Front Panel Dimension but Allow User to Change Array Size

    Hi
    I know there's a few other posts on array and scroll bars but mine is a bit different. I want to have the physical dimension of the array control fixed and allow the user to vary the size of the array as needed and a scroll bar if the number of elements exceeds the physical dimension specified. I would not mind if at the end of the scroll bar the user sees an un-initialized element.
    Thanks very much
    Solved!
    Go to Solution.

    Hi
    Sorry but I didn't mean that there was a problem with the property node, just that it wasn't doing what I wanted. I think by changing the Number of Rows property node, the number of visible rows changes such that the scroll bar is never needed. Based on what I did it seems that when the Number of Rows changed, the scroll bar never appears and the array just gets bigger on the front panel even though I enabled the scroll bar both in the control and block diagrams but I could have likely made an error if this wasn't suppose to happen. The way I did it works for what I need so I didn't look into this further.
    But I am interested in learning what I did wrong if you could point it out for future references.
    Thanks very much
    Attachments:
    Untitled 5.vi ‏11 KB

  • Restrict Form & Reports Pages but allow users to Save their Records

    Hi
    I have a database with Forms & editable Reports pages.
    I have also created a table with certain 'Admin Levels' of access so that users with the 'ADMIN_LEVEL' = 1 cannot access the editable reports pages.
    I find that applying the below restriction stops those users from accessing the reports but also won't allow those users to save any records.
    select USER_ID
    from USERS
    where USER_ID=:APP_USER
    and ADMIN_LEVEL > 1
    I then thought I could create a new page of the report but make it uneditable & use the 'Create' button to save the record to the table, but this doesn't work.
    My question is, how can I restrict access to a reports page but still allow records from restricted users to be saved?
    Thanks

    Hi,
    Firstly, you should look into Authorization Schemes: [http://download.oracle.com/docs/cd/E14373_01/appdev.32/e11838/sec.htm#BABCAGAB]
    I would suggest you create a scheme to identify admin users called, say, ADMIN_USER. This could be an EXISTS SQL query scheme of something like:
    SELECT 1
    FROM USERS
    WHERE UPPER(USER_ID) = UPPER(v('APP_USER'))
    AND ADMIN_LEVEL = 1Then, on any item within your application, you have an Authorization Scheme setting. You can then set this to either "ADMIN_USER" or "{not}ADMIN_USER" to determine which user can have access to that item. "{not}ADMIN_USER" is any user where the above query would return no records.
    Using this, you could grant access to a page, but stop access to a button and/or process. You don't, for example, have to set a scheme for the page itself (you can leave the setting as "- No Authorization Required -", so everyone can get to the page), but you can then set a Scheme for a button on that page. If the user is an ADMIN_USER and you have set a button for {not}ADMIN_USER, that user won't get the button on the page (you should also make the same setting on any process that this button triggers).
    But, if you set the page's Scheme to {not}ADMIN_USER, any ADMIN_USER will not even be able to get to the page.
    Andy

  • Windows 10 - wont enable bitlocker with AD but Windows 8 does

    Have you tried a clean install of 10 after the upgrade?  I wonder if it's a 10 issue or just related to the in-place upgrade.  

    Ok, 2008 R2 domain.
    Windows 8 systems, via GPO have it set that if they dont have a TPM, bitlocker still works. Password ID is configured to be stored in AD - works ( triple tested it just now)
    If I upgrade a Windows 8 system to Windows 10 that was never bitlockered, I cannot enable bitlocker, get error "there is no such object on the server" but it works for Windows 8 systems
    Any ideas?
    This topic first appeared in the Spiceworks Community

  • FaceTime became disabled! I purchased in Kuwait and using in India, in both regions FaceTime is enabled (100% sure). But Still, FaceTime became disable after reaching India from Kuwait ? Please help

    Hi All,
    I purchased iPhone 5s from Kuwait. There FaceTime worked pretty fine. But after i reached India, I could not find FaceTime in "Settings" nor make any FaceTime calls. I contacted Apple support several times, and these are the solutions they suggested,
    1. Restore iphone as New : After restoration, issue persists
    2. Contact carrier and get the settings: I contacted Airtel, my service provider, and they confirmed no such update available ( Also i can use FaceTime in iPhone 4S with same carrier )
    After so many calls and chats with Apple support, i don't have any answer for this. I want to make clear "FACETIAE IS AVAILABLE IN BOTH THE REGIONS".
    Still, i can't use the FaceTime in India. Because of this, i can't also make/recieve calls in my Macbook .
    Please help!

    Note- FaceTime may not be available, or may become unavailable, on devices purchased or used in certain countries, including Saudi Arabia and the United Arab Emirates. Check your device's region of purchase for more information. http-//support.apple.com/kb/HT1937.
    Try inserting your old Sim Card to see if FaceTime comes back.  If it does, it is the carrier that is "removing" the feature.

  • How to disable copy and paste in a field and allowing user to key in the data in that field...

    Hi all,
           I need your help on the below scenario.
    I have to stop user to copy and paste the data into the field. But allowing user to enter the data in that field.
    Please suggest.
    Thanks and Regards,
    Thiru.

    Hi thiru
    It sounds like you want a to write a PJC component to extend a forms text item that will capture and eliminate the key strokes and mouse actions used to copy and past thus preventing a user from performing this action.  There are many examples on the interent of how this can be written e.g. the Oracle Forms PJCs/Java Beans web site.   You will need to have jdeveloper to write thise bit of code.  Oracle forms also has a tutorial on how to plug the JAR file you generate into your for sessions.
    Regards
    Quintin

  • Anyway to Restrict Editing and Allow Users to Highlight/Bold?

    Hello Everyone, 
    I was wondering if there was a way that I could restrict editing on my 2013 MS Word document but allow users to highlight and bold the text. I have looked up many forums and have not found a thing! 
    Thank you, 
    Kimmi131

    Unfortunately, there is no way to apply true highlighting in a protected document. But note that you can assign a keyboard shortcut to apply your custom character style, which simplifies the task.
    Also, character styles are applied on top of the current paragraph style, so you only need one. Hmm, if you need multiple highlighting colors, then you may have to create more styles, yes.
    Stefan Blom, Microsoft Word MVP

  • SQL content database is locking when a user is disabled in Active Directory.

     We have an issue, first of all we are running custom code in C# within a visual web part to "Offboard Users".  In essence it disables their AD account and moves it to another OU using the ActiveDirectoryServiceClient.
    Sometimes it works seamlessly, other times it causes a lock in the SQL content DB. The list ID that always comes up with the error is the User Information List.  I have researched that SharePoint will update the UserInfo table with tp_Deleted when a
    user is Disabled. Would this also update the AllUserData table with a corresponding int value due to the foreign key relationships between these two tables?  If so could this update be causing the SQL lock? Is there anything we can do to expedite the
    process, it runs really long, goes to critical, locks the DB, proceeds to completion successfully, but meanwhile users cannot interact with the site. The list is indexed on user name and work email. It is close to 4,000 list items, but broken into views. However
    I don't think this has anything to do with the list itself as the Profile Service should be updating the list, the code does not.
    We have separate DB for each site collection and all are within / under the 100GB limit. 
    How is the AllUserData table updated from the UserInfo table? 
    Thank You,
    Crjangel 
    Frances Garland

    I wouldn't have expected such a problem, but there you are :-(. Luckily you can analyze further by issuing a SQL DMV query providing details about existing locks, for instance using this one:
    http://www.toadworld.com/platforms/sql-server/b/weblog/archive/2013/08/11/dmv-13-finding-locking-amp-blocking-sys-dm-tran-locks.aspx
    Kind regards,
    Margriet Bruggeman
    Lois & Clark IT Services
    web site: http://www.loisandclark.eu
    blog: http://www.sharepointdragons.com

  • How to not allow users to check or uncheck Enable Protected Mode

    I know how to change the HKLM\Software\Policies\Adobe\Adobe Reader\10.0\FeatureLockDown\bProtectedMode to '1' to set the 'Enable Protected Mode at startup', but how do you disable to checkbox altogether so that users cannot change it?

    From AIM (Administrator's Information Manager)  Administrator's Information Manager
    Top > Privileged > Protected Mode > bProtectedMode
    Data type
    boolean: DWORD value > REG_DWORD
    Default
    1
    Since Ver. #
    10.0
    Path
    Privileged
    Lock Path
    HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown
    Summary
    Enables Protected Mode and thereby sandboxes Reader processes.
    Details
    Protected Mode is one of the application's most advanced security features and should be enabled to protect user systems and data. Possible values include:
    0: Don't enable protected mode.
    1: Do enable protected mode.
    GUI mapping
    Edit > Preferences > General > Enable Protected Mode at startup

  • How to allow user to select pdf file on local machine and populate field with file name only

    Folks,
    I have a project requirement that I am stumped on.  I am admittedly a novice, so forgive questions that may seem obvious.
    My requirement is a form running on a client system where the user can click a button and select a PDF file name from a PDF on their local machine and then populate a form field with that file path & filename.  The file names vary between all machines, so there is no static list.  Note that the PDF is not embedded, nothing is executed, I simply need the file name.
    There are several of these on a form (20+), so manual name entry is too error prone.   I would like to use a 'browse' type dialog, but can not figure out how to implement it.
    I've looked at app.browseForFile, but the users can not install a javascript file in their adobe folder or any other files;  the functionality has to be integral with the original PDF. 
    Functionally, this is no different from the image object file browse, except that I need a PDF instead of an image file, so there doesn't seem like there should be a security issue that is any different from those surrounding the image object.
    I've been stumped on this for the entire week, and I have a deadline rapidly approaching, so any examples or suggestions (please remember I'm a novice) would be greatly appreciated! 

    Thanks for the reply Paul - do you have any sample code of how to attach the PDF?  Or how the user can select a PDF to open?  I might be able to attach it, retrieve the file name, and then un-attach it.
    Alternatively, do you know how to retrieve the file name from the imagePath object?  It will let you select PDF files, but I can't find info on how to retrieve the file name.   It should be the way you would retrieve the file name for an image.
    As a novice in this, thanks for your help and patience!

  • Allow user to fill in a fillable pdf but disallow adding comments and annotation

    Hi there.  I have a fillable pdf created by livecycle designer.  I want to let users fill in the form but prevant them adding comments and annotatons to the form.  I cannot reset the above requirements in form property - form security if I have already set a password and allowed user to fill in the form.  Can I user javascript to that effect during the document loading?
    Thanks.

    Hi,
    If you save the form as a Dynamic XML Form in the save-as dialogue, then the user will not be able to apply comments. They can only do this in flat or static PDF forms.
    See here: http://assure.ly/gYyYc2
    Previous post exploring annotating forms:
    Drawing field?
    Hope that helps,
    Niall

  • I want to open a domain.site2 file outside the default folder (User/Library/Application Support/iWeb) with iWeb11, but iWeb only opens the domain file in the default folder. If I delete the default domain file, iWeb wants to create a new site. Help please

    I want to open a domain.site2 file outside the default folder (User/Library/Application Support/iWeb) with iWeb11, but iWeb only opens the domain file in the default folder. If I delete the default domain file, iWeb wants to create a new site. Does anyone have the same problem or know how to fix it?

    In Lion the Finder folder is now invisible.  To make it permanetely visible enter the following in the Terminal applicaiton window: chflags nohidden ~/Library and hit the Enter button - 10.7: Un-hide the User Library folder.
    For opening your domain file in Lion for the first time or to switch between multiple domain files  Cyclosaurus has provided us with the following script that you can make into an Applescript application with Script Editor. Open Script Editor, copy and paste the script below into Script Editor's window and save as an applicaiton.
    Just launch the applicaiton, find and select the domain file you want to open and it will open with iWeb. It modifies the iWeb preference file each time it's launched so one can switch between domain files.
    do shell script "/usr/bin/defaults write com.apple.iWeb iWebDefaultsDocumentPath -boolean no"delay 1
    tell application "iWeb" to activate
    OT

  • On and iPad how to Allow User To Enter Custom Text  (Dropdown only) Enables users to enter a value other than the ones in the list.

    On an iPad, how do I :
    Allow User To Enter Custom Text
    (Dropdown only) Enables users to enter a value other than the ones in the list.'?

    Are you using the built-in Currency option under the Format tab? If so,
    what you're describing should not happen.

  • Deny user from seeing/selecting from tables but allow access to certain view

    Need some assistance. I have a database on SQL Server 2008 R2. Using windows authentication and a custom group, I control who can access the database and serve up the data via a web application.
    I now have a requirement to allow users to connect to the data using Power Pivot, but do not want to allow users to see all tables/views, I want explicitly control what they see.
    How do  I lock everything down so that users can still view the data from a defined view but limit access to the other tables and views ?
    In essence, my users should not be able to see/select from any of the tables or views except for a specific view that I want them to have access to.
    Thanks

    If the View and the Table are in the same database and have the same owner, then a user who has SELECT permission on the View does not require any permissions on the table.
    See
    Ownership Chains
    David
    David http://blogs.msdn.com/b/dbrowne/
    http://blogs.msdn.com/b/dbrowne/

Maybe you are looking for