Restrict Access to computers

Hi Newsgroup,

I am trying to create a group policy to restrict a specific user/group to a single machine in the Domain, i can Deny access easily, but am not able to override it with the Allow option - Deny supersedes Allow, i am also unable to block inheritance of policies.

Does anyone have any ideas that may help.

Thanks in Advance

Mike Kennedy


--
Mike Kennedy <br>
Newsquest (Sussex) Ltd <br>
Tel 01273 544364
.

Relevant Pages

  • Re: Setting up new users
    ... could do is to let the users logon as the guest account. ... configured in permissions for a share folder so keep that in mind. ... Use Group Policy to restrict the users further. ...
    (microsoft.public.win2000.security)
  • Re: Read only account
    ... You can restrict a user account so that is only has read/list/execute ... services/client&server data redirection] to restrict redirection of ... to save their password for their TS client connection via Group Policy. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Disable regedit/registry
    ... executables so that regular users do not have execute permissions. ... There is also a setting in Group Policy user ... configuration/administrative templates/system to disable registry editing. ... However by default that will restrict all users on the local machine from ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Group Policy for locking down windows xp
    ... Your best bet would be to use a combination of Group Policy and ntfs ... permissions to restrict access. ... With XP Pro you can also use Software Restriction Policies to restrict what ...
    (microsoft.public.windows.group_policy)
  • Re: best method to restrict application execution on terminal servers
    ... I would probably apply a GPO the OU where the terminal server is located. ... You can restrict to users to run only certain apps here: ... User Configuration, Administrative Templates, System. ... You will also need to enable "User Group Policy lookback processing mode" ...
    (microsoft.public.windows.server.active_directory)