Does anyone know of a way to use Group Policy to restrict the OS version
that can connect to a domain?
What I want to do is simple. I want only machines currently running WinXP
SP2 to join my domain. My hope is this will provide an additional layer of
security to the domain.
Re: Security on students workstations? ... Simply put you want to use group policy to restrict groups, services, NTFS,... Registry Key, and Security settings.... (microsoft.public.win2000.security)
Re: Computer Management Security Problem ... I have confirmed that they can only log into their own machines so that level of security is working. ... > adding their domain account to the local administrators group.... then you can not realistically restrict them. ... > using Group Policy to restrict their access to mmc snapins, ... (microsoft.public.win2000.security)
Re: Bit of advice on current AD structure. ... If you can do everything you need to do from a GPO and security standpoint there is no reason to move to something more complex. ... So you need to figure out what your security and group policy strategy is, then make your design.... I am really disliking native delegation of security for user objects more and more as new apps come out and having rights to the users gives you rights to harm the apps, things like Exchange come to mind here where an admin who can directly manipulate user objects can cause nightmares for folks managing the Exchange Service. ... (microsoft.public.windows.server.active_directory)
Re: restrictions in effect ... I wonder if some security software installed on that client PC is causing your inability to change the home page. ... You could control the home page with a group policy, but it seems like that would be applying elsewhere besides this one PC. ... Then for the printing thing, I think I'd start by going to the IE Internet Options, Advanced tab, and click "Restore advanced settings." ... (microsoft.public.windows.server.sbs)
Re: Setting up new users ... could do is to let the users logon as the guest account.... configured in permissions for a share folder so keep that in mind. ... Use Group Policy to restrict the users further. ... (microsoft.public.win2000.security)
