Re: Restricting users from changing desktop settings

thanks for the help i'll try going through this today!
--
JG


""Inn Jin [MSFT]"" wrote:

Hi JG,

Thank you for posting and thanks Kevin's input.

From the description, I understand you want to restrict users from changing
their desktop settings (e.g. wallpapers/screensavers). If I am off base,
please don't hesitate to let me know.

Based on my knowledge, you can create a new OU which contains users you
want to restrict. And link a new Group Policy Object which configure
restrictions to the new OU, to do so:

I. Create a new OU and add users.
======================
1. Open Active Directory Users and Computers by click start
->administration tools-> Active Directory Users and Computers

2. In the console tree, right-click the folder in which you want to add an
organizational unit (e.g. yourdomainname.local -> MyBusiness -> Users)

3. Point to New, and then click Organizational Unit.

4. Type the name of the organizational unit.

5. Drag users to this OU.

II. Create a new GPO and link to the OU.
======================
1. Locate the node Server Management console -> Advanced Management ->
Group Policy Management -> Forests -> Domains -> "yourserverdomain".

2. Right-click the new OU you created and choose Create and Link a GPO
here­..... then name the new GPO.

3. Right-click the new GPO you created in the right panel and choose edit.

4. Locate User Configuration\Administrative Templates\Control
Panel\Display. You'll see many options in the right panel. To prevent users
changing desktop setting, double-click "Hide Settings tab" policy on the
right panel and choose enable, then click OK. This policy may help you
removes the Settings tab from Display in Control Panel. Thus, this setting
prevents users from using Control Panel to add, configure, or change the
display settings on the computer.

5. If you just want to prevent users changing wallpaper or screensaver, you
can change properties of ''Prevent changing Wallpaper" or "Hide screensaver
tab", depends on you.

Related information:

To know more about Group Policy
http://technet2.microsoft.com/windowsserver/en/technologies/featured/gp/defa
ult.mspx

Create or delete a Group Policy object
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Serve
rHelp/4f8dd800-e0e3-44a6-8a4a-d3d34b245fe7.mspx

Create a new organizational unit
http://technet2.microsoft.com/WindowsServer/f/?en/library/f66c6142-c87a-457a
-9595-d89fb5ce96c71033.mspx

Link a Group Policy object to a site, domain, or organizational unit
http://technet2.microsoft.com/WindowsServer/f/?en/library/1ad2a3a3-b749-42b4
-b606-fc6f1079d0271033.mspx

I appreciate your time. I am happy to be of assistance to you and look
forward to your reply.

Have a nice day!

Best regards,

Inn Jin (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:

http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


.

Relevant Pages

  • Re: Restricting users from changing desktop settings
    ... if so does this mean that the users no longer fall under the GPO ... their desktop settings. ... And link a new Group Policy Object which configure ... Right-click the new GPO you created in the right panel and choose edit. ...
    (microsoft.public.windows.server.sbs)
  • Re: Restricting users from changing desktop settings
    ... And link a new Group Policy Object which configure ... Right-click the new GPO you created in the right panel and choose edit. ... removes the Settings tab from Display in Control Panel. ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: Win2K3 GPMC settings.
    ... when i select this GP in the Group Policy Object in the ... To change the SYSVOL permissions to those in Active Directory, ... view anything in the settings tab of the GP. ... Beginning data collection for replication summary, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Where do define Internet Cache size
    ... you cannot switch modes because there are settings ... Group Policy Object, or choose the Reset Browser Settings option first. ...
    (microsoft.public.windows.group_policy)
  • Re: IE Maintenance settings stopped working since XP SP2
    ... I don't think this is related to the desktop wallpaper. ... create a test user with app data redirection turned off and see. ... policy settings to see if there's some kind of conflict. ... > Not sure not redirecting application data is an option with many students ...
    (microsoft.public.win2000.group_policy)
Loading