Software Restrictions



I want to implement 2 GPOs to restrict certain software. It is a Windows
2000 Domain with Windows 2000 Pro workstations. The first policy will
restrict about 10 applications and this policy will be applied to the
Domain Users security group. I created a second group called project users.
In the 1st GPO, project application is one of the restricted applications.
The 2nd GPO will have the sames applications listed except Project, and this
GPO will be applied to the Project Users security group. In logic, this
should work, however, when I added my test user to the Project Users group,
he couldn't access the any of the restricted applications, by design, but he
also couldn't acces the Project application. Can someone tell me what I'm
doing wrong? Does it have something to do with the test user being a member
of both Domain Admins and Project Users? How can I get this to work?


Kevin


.



Relevant Pages

  • Re: Software Restrictions
    ... >I want to implement 2 GPOs to restrict certain software. ... > The first policy will restrict about 10 applications and this policy will ... > In the 1st GPO, project application is one of the restricted applications. ... > this GPO will be applied to the Project Users security group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Software Restrictions
    ... >>I want to implement 2 GPOs to restrict certain software. ... >> be applied to the Domain Users security group. ... > But you CAN set it in the User section of the GPO and have it ... >> this GPO will be applied to the Project Users security group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Software Restrictions
    ... I made Project Users a Global group and now it works fine. ... >> I want to implement 2 GPOs to restrict certain software. ... >> restrict about 10 applications and this policy will be applied to the ... >> In the 1st GPO, project application is one of the restricted ...
    (microsoft.public.windows.server.active_directory)
  • RE: Create user that dont have access to domain
    ... If you are talking about PCs in public areas, ... listed below) and then restrict network object access using the GPO. ... Through a GPO or local policy? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Securing TS environment
    ... Create a security group called "Restricted Users" (or something ... Define a restrictive GPO, link it to the OU that contains your ... Edit the Security settings of the GPO, add the Terminal Server ... > I would like to restrict some of the users to not be able to see ...
    (microsoft.public.win2000.termserv.clients)