Re: SImple Active Directory Setup Question

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Hi

Level 1 - all rights, admin, etc.

- You shouldn't allow this. Allowing the users to logon with full admin
rights is A BAD CONFIGURATION and represents a security breach to your
network.

Level 2 - Can't change any computer settings, ALLOW web-surfing

- You doin't need to change nothing in the computer settings.

Level 3 - Can't chagne any comptuer settings, NO Surfing allowed and
disable

- If you want not allow "web-surfing", just configure a wrong proxy server
under internet options, can do this using GPO. If you're looking for a
better control, consider the use of a proxy server.

DNS entries in Network neighborhood

- Make sure that all your clients dns properties ALLWAYS use the DNS in your
domain.

--
I hop that helps

Good Luck
Jorge Silva
MCSA
Systems Administrator





"SQL Brad" <SQLBrad@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:B127F814-575D-4573-9BED-F2333F3571FD@xxxxxxxxxxxxxxxx
Quick question, here is my environment....and I want to make sure I do
this
correctly...

I have a Windows 2000 Server with AD and GP on it, I have a total of 7
computers, whereby 8 different people need to log on anywhere. In
addition
to that, I need to break those 8 different people into 3 levels..

Level 1 - all rights, admin, etc.
Level 2 - Can't change any computer settings, ALLOW web-surfing
Level 3 - Can't chagne any comptuer settings, NO Surfing allowed and
disable
DNS entries in Network neighborhood

Basically this is a Dr.s office for animals and they don't want the night
time or weekend staff to surf the Internet.

With this in mind, do I need to set up 3 different domains in order to
achieve those 3 different levels?

thanks in advance
brad


.



Relevant Pages

  • Re: Granting all users Admin Rights
    ... I am a Network Admin for Cuesta College and we are dealing with the same ... Techs to go to install every little piece of software on users computers. ... I believe that giving users Power Users rights is the best way ...
    (microsoft.public.win2000.security)
  • Re: Impact of removing administrative rights in an enterprise running XP
    ... the network admin is "Admin" of the network... ... they should only have/need the appropriate rights for their role in the firm. ... reporting mechanisms for software/patch installations whatsoever. ...
    (Focus-Microsoft)
  • Re: Printer Problems
    ... he had the user rights to disable ... (default install behavior on xp), and it failed because DeskJet needs it ... If you create another admin on that system, you could see the problem again, ... > I manage a small network at a downtown Denver hotel. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Impact of removing administrative rights in an enterprise running XP
    ... You can easily install patches without admin rights... ... WSUS can push out patches and the workstations do not need admin rights. ... Yes, there are success stories, but it's totally dependent on a managed network. ...
    (Focus-Microsoft)
  • Re: Granting all users Admin Rights
    ... I am responsible for the upkeep and security of 50 ... > Standard users can do everything they need without admin ... >>I am currently the network manager at a small college ... >>rights on their machines. ...
    (microsoft.public.win2000.security)