Re: Access policy

From: Dmitry Korolyov [MVP] (d__k_at_removethispart.mail.ru)
Date: 08/16/04 

Date: Mon, 16 Aug 2004 17:54:56 +0400

If you have Windows 2000 DCs, you can create and manage GPOs from AD Users
and Computers console. Go to the properties of an OU, select Group Policy
tab, and click New to create new object. Then Edit it to configure settings.
on Windows 2003, you can install GPMC and benefit from its advanced
interface that allows you to create and manage GPO in a more efficient way. 

-- 
Dmitry Korolyov [d__k@removethispart.mail.ru]
MVP: Windows Server - Active Directory
  "Jerry" <anonymous@discussions.microsoft.com> wrote in message
news:62ac01c481e6$b07d4f40$a401280a@phx.gbl...
  Sorry, I don't know how and where to create this GPO.
  Can you please help me do this.  The Administrator had
  suddenly left us.
  Thanks a lot.
  Jerry
  >-----Original Message-----
  >Group Policy.
  >Create a GPO and apply it to a container that has all
  the computers you want
  >this setting to take effect on.
  >
  >-- 
  >James Brandt [MSFT]
  >
  >
  >"Jerry" <anonymous@discussions.microsoft.com> wrote in
  message
  >news:589701c48136$6cd6f3a0$a501280a@phx.gbl...
  >> Thanks fo the reply.
  >>
  >> Isn't there a way to do from the DC and apply it to all
  >> the machines or the machines tha I choose ?
  >>
  >> Regards
  >>
  >>>-----Original Message-----
  >>>Configure a security policy (through Group Policies) on
  >> all computers in the
  >>>domain makins that so only domain accounts have
  >> interavtive logon privilege.
  >>>For example, you can remove default "Authenticated
  >> Users", "Everyone" and
  >>>"Users" groups from that privilege, and assign it to
  >> Domain Users instead.
  >>>Since all domain user accounts are members of this
  >> group, they will be able
  >>>to log on, and local accounts which are not members,
  >> will not.
  >>>
  >>>-- 
  >>>Dmitry Korolyov [d__k@removethispart.mail.ru]
  >>>MVP: Windows Server - Active Directory
  >>>
  >>>
  >>>  "Jerry" <anonymous@discussions.microsoft.com> wrote
  in
  >> message
  >>>news:5ab801c48129$ff8428b0$a401280a@phx.gbl...
  >>>  Hi
  >>>
  >>>  Is there any way to force users using their domain
  >>>  accounts instead of local account to access the
  >> network?
  >>>
  >>>  Thanks
  >>>
  >>>  Jerry
  >>>
  >
  >
  >.
  >

Relevant Pages

  • RE: GPO not working after Migration
    ... I suggest you use Active Directory Users and Computers to try again. ... Open the GPO and enable the following polciy. ... | We just moved to Windows 2003 AD and we were trying to ... | implement GPO on the client machines. ...
    (microsoft.public.windows.server.migration)
  • Re: GPO and Win 2k Pro Clients
    ... First I would disable all GPOs to ensure it is a GPO ... exceptions on the Windows Firewall but Windows 2000 doesn't have Windows ... at one of the parent OUs for Anti Virus. ... After moving computers into the ...
    (microsoft.public.windows.group_policy)
  • How licenses are counted
    ... I have 3 accounts for members of my family and one more that I use to log on ... Windows "users' I have created. ... I have 6 computers running WinXP. ... And I also have a wireless access point that has ...
    (microsoft.public.windows.server.sbs)
  • Re: EFS Errors
    ... GPO in an OU that the one at the top of the list has the highest priority ... Policy can be used to disable EFS on XP Pro computers. ... For a Windows Server 2003 domain: ... Select to uncheck the Allow Users to Encrypt Files Using Encrypting ...
    (microsoft.public.security)
  • Re: shareing XP Pro folders in a workgroup problem
    ... You will need to create accounts with same names and passwords on each ... Make sure you keep the passwords in sync. ... Small Business Server 2003 - a reasonably priced version of Windows Server ... Unfortunate under "location" it only mentions the> local computer and if you try to change the location it does not see> any other locations of the other computers. ...
    (microsoft.public.windowsxp.security_admin)
Loading