Simultaneous "local" GP high security and low security template help needed
From: MDH (sugardoc_at_mindspring.com)
Date: 08/30/04
- Next message: Jason Langdon: "Printing GPO Settings"
- Previous message: Torsten Christiansen: "GPO for configuring 802.1x auth on wired LAN connections"
- Next in thread: Roger Abell: "Re: Simultaneous "local" GP high security and low security template help needed"
- Reply: Roger Abell: "Re: Simultaneous "local" GP high security and low security template help needed"
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 30 Aug 2004 03:59:01 -0700
I am new to GPO editing and not sure how to proceed. I'm
trying to invoke a high security template, such as
packaged with the MMC, to "lockdown" the user desktops for
most users - while at the same time retaining the ability
of an Admin to logon locally to the machine to perform
troubleshooting, install software, etc. I notice than in
browsing many of the switches available (security, admin,
software) etc., there are choices to apply the switches to
various users, and or groups, etc, so that the use of
groups and / or OUs would do the trick (switches such
as "deny logon locally" can be populated like this - so
that constructing my own high security OU and high
privilege OUs will work) however, other switches for local
management, such as "remove network neighborhood from
desktop" and many important others like it do NOT have the
ability to populate it with groups or users - but rather
only "enabled/disabled(and sometimes not configured)" i.e.
for ALL users, groups, OUs, etc. Enabling this switch, and
mamy like it, would, by my way of seeing it, force the
Admins (i.e. ME) to lose the same resources as my high
security users. So my question - how do I use /
construct / invoke a high security LOCAL template for the
vast majority of my users while still retaining the
ability for Admins to logon locally and have free reign?
Thanks in advance for any help, and certainly feel free to
pose it in "Dummy" fashion if necessary. . . even step by
step white papers and or physical copies of such a
template to import would be greatly appreciated
- Next message: Jason Langdon: "Printing GPO Settings"
- Previous message: Torsten Christiansen: "GPO for configuring 802.1x auth on wired LAN connections"
- Next in thread: Roger Abell: "Re: Simultaneous "local" GP high security and low security template help needed"
- Reply: Roger Abell: "Re: Simultaneous "local" GP high security and low security template help needed"
- Messages sorted by: [ date ] [ thread ]