RE: restricted internet access with GPO



LAN ENVIRONMENT: Windows 2000/2003 Servers AD Domain at Windows 2000
functional level. Client computers running WindowsXP Professional though in
process of migrating from WinNT 4.0 to WinXP so most clients are NT. About
6,000 seats in this enterprise LAN.

SITUATION: We have roaming profiles enabled and Group Policies lock down the
WinXP client and enable folder redirection whereby users cannot save data to
their C:\ drive ONLY to their MY Documents folder which is automatically
redirected to their home folder. We also have a GPO setting that redirects
user's desktop to the home folder as well so whatever WinXP machine a user
logs on to he/she will get same desktop, icons, shortcuts etc.

PROBLEM: Whenever a user has more than about 12-15 icons/shortcuts/files on
their desktop and then deletes the icon it goes away HOWEVER when he/she logs
off then logs on the icon reappears. If over 12 icons on desktop, when you
delete icons they reappear after logoff/logon the profile on the server is
not taking the changes or overwriting the deleted icons restoring them.
Users are NOT given exclusive rights to the desktop.

Any and all input is greatly appreciated. Thanks & have an awesome day :-)


"Draughtsman" wrote:

> SBS2003 server, XP Pro SP2 clients
>
> Hi,
>
> I would like to give some users restricted access to Internet and some
> users complete Internet access. The restricted access would contain only a
> few known sites. Can I do this through GPO? I've been searching quite a
> while, but I can seem to find the right document.
>
>
> Can someone please direct me to a "how-to" document?
>
>
> thanks, Draughtsman
>
.



Relevant Pages

  • Re: SMS 2003 w/SP1 without opening WINXP SP2 firewall ports?
    ... checks for new advertisement on the server and run / download the ... The SMS client remote installation is ... I don't think the WinXP firewall by default allows all ports connection ... SMS would likely be blocked if it ...
    (microsoft.public.sms.admin)
  • GPO roaming profile issue.
    ... Windows 2000/2003 Servers AD Domain at Windows 2000 ... WinXP client and enable folder redirection whereby users cannot save data to ... logs on to he/she will get same desktop, icons, shortcuts etc. ...
    (microsoft.public.windows.group_policy)
  • Calling on WindowsXP Roaming profile experts
    ... Windows 2000/2003 Servers AD Domain at Windows 2000 ... WinXP client and enable folder redirection whereby users cannot save data to ... logs on to he/she will get same desktop, icons, shortcuts etc. ...
    (microsoft.public.windows.server.active_directory)
  • WindowsXP roaming profile issue
    ... Windows 2000/2003 Servers AD Domain at Windows 2000 ... WinXP client and enable folder redirection whereby users cannot save data to ... logs on to he/she will get same desktop, icons, shortcuts etc. ...
    (microsoft.public.windows.server.active_directory)
  • GPO WinXP roaming profile issue
    ... Windows 2000/2003 Servers AD Domain at Windows 2000 ... WinXP client and enable folder redirection whereby users cannot save data to ... logs on to he/she will get same desktop, icons, shortcuts etc. ...
    (microsoft.public.windows.server.active_directory)