Re: Help with Policys

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 02/13/05 

Date: Sun, 13 Feb 2005 17:04:00 -0600

If these users logon to Windows XP Pro computers then you can use Software
Restriction policies to prevent them from installing most software and
running unauthorized applications. Other options such as you mention
[context menu for desktop] are available under user
configuration/administrative templates where you will see several categories
that you can restrict users.

To configure Group Policy for a specific group of users, create an
Organizational Unit with it's own Group Policy linked to it and configure
the user's restrictions in that GPO and add the user accounts to that OU.
Another option is to use GPO filtering in where you configure a Group Policy
and in it's properties/security give just that global group you want to
restrict "apply" permissions. If you have not done such yet, be sure to
install the Group Policy Management Console on at least one of your Windows
2003 Servers. The links below explain more. --- Steve

http://www.microsoft.com/windowsserver2003/gpmc/gpmcwp.mspx --- How to use
GPMC
http://www.microsoft.com/windowsserver2003/gpmc/default.mspx --- GPMC
download.
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx
  --- Software Restriction Policies.
http://support.microsoft.com/default.aspx?scid=kb;en-us;322176 --- applies
to Windows 2003 also.

"CJM" <joem83@msn.com> wrote in message
news:%231CYBzhEFHA.228@tk2msftngp13.phx.gbl...
>I created a group on my windows 2003 server and added some usernames to
>that group. I would like to restrict this group from being able to install
>programs on the workstation, being able to access the workstation's OS
>files, and to be able to set other polices like no-right click on the
>desktop. I would like these setting to be set for this group only, not for
>all groups and users.
>

Relevant Pages

  • Re: Windows clock
    ... For XP Pro, this can be restricted via the Group Policy Editor. ... Go to Computer Configuration, Windows Settings, Security Settings, Local Policies, User Rights Assignment. ... you would have to restrict access to the TIMEDATE.CPL application. ...
    (microsoft.public.windowsxp.newusers)
  • Re: Help with Policys
    ... > If these users logon to Windows XP Pro computers then you can use Software ... > Organizational Unit with it's own Group Policy linked to it and configure ... I would like to restrict this group from being able to ... >>install programs on the workstation, ...
    (microsoft.public.windows.group_policy)
  • Re: Re: Redirecting Word docs in group policy
    ... >>Hi, That is a good idea, but we restrict the C: ... I use Folder Redirection in Group Policy to "redirect" ... > This only works for Windows 2000 or Windows XP clients in an Active ... > I found this was the best way to make sure my users were saving on the ...
    (microsoft.public.win2000.group_policy)
  • Re: How to block system copy commands at driver level
    ... about GUI level windows internals, but there are a number of tricks you ... Open Source&Dest/Read Source/Write Dest loop, and you're not going to be ... thats the reason our task is limited to restrict standerd copy/paste ... #3 + preventing someone opening the file in notepad, ...
    (microsoft.public.development.device.drivers)
  • Re: Policy
    ... > You can use Group Policy to further restrict access. ... > can use the Windows applications restrictions in user ... > enabling] to restrict users from running or installing unauthorized ...
    (microsoft.public.windows.server.security)
Loading