Re: Restricting users from changing desktop settings



""Inn Jin [MSFT]"" thank you again for your instructions, I have tried to go
through the steps you posted, however can you answer the following questions:

1. When you say (5.) Drag users to this OU. do you mean move them from the
'SBS users', if so does this mean that the users no longer fall under the GPO
linked to SBS users?

2. If the above is the case do I need to configure all other parameters to
the same as the original template?


Thank you for your time in helping with this posting!

Have a nice day!
--
JG


"J Graham" wrote:

thanks for the help i'll try going through this today!
--
JG


""Inn Jin [MSFT]"" wrote:

Hi JG,

Thank you for posting and thanks Kevin's input.

From the description, I understand you want to restrict users from changing
their desktop settings (e.g. wallpapers/screensavers). If I am off base,
please don't hesitate to let me know.

Based on my knowledge, you can create a new OU which contains users you
want to restrict. And link a new Group Policy Object which configure
restrictions to the new OU, to do so:

I. Create a new OU and add users.
======================
1. Open Active Directory Users and Computers by click start
->administration tools-> Active Directory Users and Computers

2. In the console tree, right-click the folder in which you want to add an
organizational unit (e.g. yourdomainname.local -> MyBusiness -> Users)

3. Point to New, and then click Organizational Unit.

4. Type the name of the organizational unit.

5. Drag users to this OU.

II. Create a new GPO and link to the OU.
======================
1. Locate the node Server Management console -> Advanced Management ->
Group Policy Management -> Forests -> Domains -> "yourserverdomain".

2. Right-click the new OU you created and choose Create and Link a GPO
here­..... then name the new GPO.

3. Right-click the new GPO you created in the right panel and choose edit.

4. Locate User Configuration\Administrative Templates\Control
Panel\Display. You'll see many options in the right panel. To prevent users
changing desktop setting, double-click "Hide Settings tab" policy on the
right panel and choose enable, then click OK. This policy may help you
removes the Settings tab from Display in Control Panel. Thus, this setting
prevents users from using Control Panel to add, configure, or change the
display settings on the computer.

5. If you just want to prevent users changing wallpaper or screensaver, you
can change properties of ''Prevent changing Wallpaper" or "Hide screensaver
tab", depends on you.

Related information:

To know more about Group Policy
http://technet2.microsoft.com/windowsserver/en/technologies/featured/gp/defa
ult.mspx

Create or delete a Group Policy object
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Serve
rHelp/4f8dd800-e0e3-44a6-8a4a-d3d34b245fe7.mspx

Create a new organizational unit
http://technet2.microsoft.com/WindowsServer/f/?en/library/f66c6142-c87a-457a
-9595-d89fb5ce96c71033.mspx

Link a Group Policy object to a site, domain, or organizational unit
http://technet2.microsoft.com/WindowsServer/f/?en/library/1ad2a3a3-b749-42b4
-b606-fc6f1079d0271033.mspx

I appreciate your time. I am happy to be of assistance to you and look
forward to your reply.

Have a nice day!

Best regards,

Inn Jin (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:

http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


.



Relevant Pages

  • Re: Restricting users from changing desktop settings
    ... And link a new Group Policy Object which configure ... Right-click the new GPO you created in the right panel and choose edit. ... removes the Settings tab from Display in Control Panel. ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: Restricting users from changing desktop settings
    ... their desktop settings. ... And link a new Group Policy Object which configure ... Right-click the new GPO you created in the right panel and choose edit. ... If you just want to prevent users changing wallpaper or screensaver, ...
    (microsoft.public.windows.server.sbs)
  • RE: SBS 2008 migration - Update policies missing
    ... Please understand that for a Group Policy Object from another domain you ... cannot simply restore it to the domain because the GPO has the invalid SID. ... You may import the settings from the GPO backup to restore the problematic ... Microsoft Online Partner Support ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2008 migration - Update policies missing
    ... Please understand that for a Group Policy Object from another domain you ... cannot simply restore it to the domain because the GPO has the invalid SID. ... You may import the settings from the GPO backup to restore the problematic ... Microsoft Online Partner Support ...
    (microsoft.public.windows.server.sbs)
  • Re: adding group policy to new OU
    ... Is there a way to copy the GPO contents (ie. settings) to another GPO?. ... I want to keep the GPOs distinct based on the OU. ...
    (microsoft.public.win2000.group_policy)