Re: Group Policy - Restricted Group

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hi Meinolf,

Thank you for this. But can you give me specific info on this. i think i
have tried everything in GPO but I can't seem nto configure it correctly.
Here is what I'll do.

1. On local PC i'll make the AD users as Power Users.
2. In GPO set OU's (AD users resides) will have unrestricted software
installation.

PArt 1 is easy but part 2 where exactly this resides at GPO.

Your a big help. Thanks a lot.

Allan
"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb661c9628cb706e7b3b9a34@xxxxxxxxxxxxxxxxxxxxxxx
Hello Allan,

If your users are local admin they have full control over the local
machine. Remove them from the local admin group and consider to use GPO to
install software for the domain users/machines.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Hi,

Need some help in GPO. i have a Windows 2003 Enterprise Server running
as Domain Controller. I our Active Directory users to have this
policies.

1. Local user can install any application on their local PC.
2. Set restrictions on LAN Configuration, Desktop and other
security
settings.
My current setting is each AD users are administrator on their local
PC. So restricting item 2 is quite impossible.

So how to work on this? I'm reading and browsing about Restricted
Group in GPO. Is this the answer tomy query? If it is how will I set
this up?

Hope for your assistance.

Thank you,

Allan






.

Relevant Pages

  • Re: Use Group Policy to Deploy Outlook 2003 and Office 2000
    ... to create a GPO for deploying Office 2000 to the user configuration side ( ... Outlook XP to the user configuration and to ... an unattended install with a network boot disk to install WIN2000 to two ... I then completely added the Outlook XP GPO. ...
    (microsoft.public.win2000.active_directory)
  • Re: group policy software install
    ... Also realize that since you created the package under the computer settings of your GPO, the install will run during startup before any user logs in. ... Software Settings> Software installation I create a package for it. ...
    (microsoft.public.windows.server.sbs)
  • Using GPO to install Office 2003
    ... I am setting up a GPO to install Office 2003. ... create the transform file for Office and setup the GPO. ... installed again along with all the Office 2003 settings. ...
    (microsoft.public.windows.group_policy)
  • Re: Install Windows Patch via GPO
    ... This posting is provided "AS IS" with no warranties, ... If you install the patch from the policy location it works? ... of my script - I go in to the OU, edit the GPO, Startup scripts ...
    (microsoft.public.windows.group_policy)
  • Re: Published install works for one user but fails for another. Both have same rights
    ... > I am not sure that you are trying to deploy this application via GPO. ... > Control on both the Share and NTFS permissions and then either Domain ... >> If a member of the Domain Users group tries to install the package, ... >> a user, I can install that same package fine, so the policy does see it. ...
    (microsoft.public.win2000.group_policy)