Re: Editing gpedit.msc for Certain users only

Hi all,

Thanks for the reply. Sorry for not being clear.

What I want to achieve is when groupABC (domain group) login to
serverXYZ
(server is on the domain), the RUN option is not available on the Start
Menu.

Any other users or group who login to serverXYZ will be able to see the
RUN option.

But when groupABC login to any other servers on the network, the RUN
option will still be available for them.

Policy is we cannot use local group and this server has to be part of
the domain.

Hope I am clearer this time.

Thank you!

Regards,
Regina Lim

Paul Hinsberg wrote:
> You have a couiple of options:
>
> 1) You could create a separate OU and put the Administrators in that OU. In
> that OU create a policy that specifically couteracts the one that you have
> created for the rest of the domain. The policy on the OU will overwrite the
> policy on the Domain.
>
> 2) Create a policy whose only change is to remote the Run Menu. Apply it to
> the domain so that you now have two policies - Default Domain Policy and
> Remove Menu Policy. Then adust the permissions on the Remove Menu Policy so
> that Administrators cannot read/apply it. Then, the policy will not apply to
> them.
>
> As a suggestion, I would use the Group Policy Manager (downloaded from
> www.microsoft.com/downloads) so that you can test the applied policies and
> manage the multiple policies a little easier.
>
> Paul Hinsberg, MCSE
>
> <reginalimys@xxxxxxxxx> wrote in message
> news:1130231924.804062.99460@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> > Hi all,
> >
> > I need to configre my Win2k Stnd Server to Remove the Run menu from the
> > Start Menu. But editing this in gpedit.msc will applies to all user who
> > login to that server. Does this include adminstrator? And how can I
> > restrict this just for certain users or a group of users?
> >
> > Thanks in advance!
> >
> > Regards,
> > Regina Lim
> >

.

Relevant Pages

  • Re: How to allow users to create groups and shares
    ... Add the user/group to the Computer configuration, windows settings, security settings, Local policies, "Allow logon locally" in the Default domain controllers policy and on a existing or new created policy for the member servers. ... Filtering: Not Applied ... check with GPMC on the server or from a client the policy settings. ...
    (microsoft.public.windows.server.active_directory)
  • Domain Controller Security Policy errors
    ... Security Policy or the Domain Controller Security Policy. ... The DC is also a print and file server. ... The domain controller for Group Policy operations is not available. ...
    (microsoft.public.win2000.active_directory)
  • RE: Cant set Local Security policies. They fail to save
    ... predefined Security Template on SBS 2003 to restore security groups ... run "gpupdate.exe /force" under command prompt to force the policy ... reboot the Server to test. ... and then logon to client computer to test if user can save system logs. ...
    (microsoft.public.windows.server.sbs)
  • Re: How to allow users to create groups and shares
    ... policy and on a existing or new created policy for the member servers. ... Filtering: Not Applied ... Allow remote desktop connections ... check with GPMC on the server or from a client the policy settings. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Security Logon/Logoff Events
    ... I haven't yet set password policy or configured account lockout policy so I ... will do that in due course to fully secure the server. ...
    (microsoft.public.windows.server.sbs)