Re: Group Policy???



In news:506BE02C47E10@xxxxxxxxxxxxxxx,
udi via WinServerKB.com <forum@xxxxxxxxxxxxxxx> typed:
> I have 1 Windows 2003 Ent. Server (Domain) and 60 Windowxp
> professional client.
> I want to implement Group Policy in our Domain Environment.
> Also I want to implement Local Policy on Every Client Machine.

Why local policy?
>
> I want to apply following restriction in our Domain.
> 1) Nobody's Logon to Local Machine

Don't give them local accounts, don't let them know the local admin
credentials, don't give them anything beyond domain user permissions, and
they can't do this at all anyway.

> 2) Restrict all the Local System Resource except Owner of machine.

What do you mean by local system resource, and by owner?

> 3) Nobodys access local machine from network

Nobody can access a share on a workstation on the network, unless you
specifically let them.

> 4) Restrict Operating System Drive on every client machine.

Meaning ?
>
> Group Policy Object.
> 1) Restrict Software installaltion for user

If they don't have local admin rights, they won't be able to install 99% of
software anyway.

> 2) Restrict some network sources.

Not sure what you mean here, either....
>
> Can anybodys help me on this, also suggest any other activities
> restrict through Group Policy as well as Local Machine Group Policy.

Be careful in your terminology. You don't want or need to use local machine
policies when you have a domain. You want to control them within AD,
centrally. Right?
>
> Please guide me step by step..I so can easily implement in our domain
> environment.
>
> Regards
> Udi

You might want to post in a GP group for more specific help.... but it would
be good to provide more details what exactly you want to prevent.


.

Relevant Pages

  • Re: Group Policy????
    ... Use domain/OU policies - they override local policies, ... > I want to implement Group Policy in our Domain Environment. ... > 1) Nobody's Logon to Local Machine ... > 2) Restrict all the Local System Resource except Owner of machine. ...
    (microsoft.public.windows.server.security)
  • Re: Group Policy???
    ... > I want to implement Group Policy in our Domain Environment. ... > Also I want to implement Local Policy on Every Client Machine. ... > 1) Nobody's Logon to Local Machine ... > 2) Restrict all the Local System Resource except Owner of machine. ...
    (microsoft.public.windows.server.general)
  • Re: Group Policy????
    ... While you can do everything with group policy from AD ... want to make some settings unique to each machine, ... > 1) Nobody's Logon to Local Machine ... > 2) Restrict all the Local System Resource except Owner of machine. ...
    (microsoft.public.windows.server.security)
  • Re: Problem connection XP SP2 Workstation after installing SBS 2k3
    ... Thanks for updates. ... I find some issue that will blocked the group policy applied properly to ... the special client computer, except the XP firewall. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Advanced Client Installations on Restricted W2K machines
    ... Add the group policy snap in to MMC then choose default domain policy. ... client and will need to re-direct the source file resolution to that source. ... >> user to launch the SMS client installation as an administrative user. ... >>> the equation and install the SMS client via login scripts, ...
    (microsoft.public.sms.admin)