Guest CryptiniteDemon Posted April 16, 2008 Posted April 16, 2008 Can anyone give me a step by step guide or link me to some place that will show me how to set up group policies properly? I want to make it to where 20 users have restricted desktop access when they log on. For the purpose of this, let's just say that the recycling bin won't be visible to these users. How would I go about doing this? I've tried a few things and I can't get it to work when I have those users log into the domain. Thanks
Guest Michael Posted April 16, 2008 Posted April 16, 2008 Re: Using group policies to restrict desktop aspects Open your ADUC (Active Directory Users and Computers). It will help that you create a new OU (Organization Unit) to contain the users which need the restrictions. After you create the OU, move the users into it and then right click the OU and select "Properties". The next steps will vary slightly weather you have the GPMC (Group Policy Management Console) installed. Click on the "Group Policy" tab. If you do not have GPMC, click on "New". Name your GPO, then "Edit" it. Under "User Configuration, Administrative Templates, you will find a plethora of items you can control for these users. Do not do these changes to your default domain policy, only to the policy linked to that specific OU and it will only happen to those users in that OU. As soon as you move a user into that OU, AD replicates and the user logs out and in, they will also have the restrictions. "CryptiniteDemon" <CryptiniteDemon@discussions.microsoft.com> wrote in message news:E9F2F734-E367-4395-B99A-9455A4E86F9F@microsoft.com... > Can anyone give me a step by step guide or link me to some place that will > show me how to set up group policies properly? > > I want to make it to where 20 users have restricted desktop access when > they > log on. For the purpose of this, let's just say that the recycling bin > won't > be visible to these users. > > How would I go about doing this? I've tried a few things and I can't get > it > to work when I have those users log into the domain. > > Thanks
Guest Ace Fekay [MVP] Posted April 17, 2008 Posted April 17, 2008 Re: Using group policies to restrict desktop aspects In news:E9F2F734-E367-4395-B99A-9455A4E86F9F@microsoft.com, CryptiniteDemon <CryptiniteDemon@discussions.microsoft.com> typed: > Can anyone give me a step by step guide or link me to some place that > will show me how to set up group policies properly? > > I want to make it to where 20 users have restricted desktop access > when they log on. For the purpose of this, let's just say that the > recycling bin won't be visible to these users. > > How would I go about doing this? I've tried a few things and I can't > get it to work when I have those users log into the domain. > > Thanks Depending on which OS you have, there are anywhere from 700 - 1000 different settings and desktop settings options differ. Working with Group Policy: http://www.petri.co.il/working_with_group_policy.htm Best Practices for Designing Group Policy http://www.windowsnetworking.com/articles_tutorials/Best-Practices-Designing-Group-Policy.html Configuring User Group Policy Settings http://technet2.microsoft.com/windowsserver/en/library/a3c78eb9-92fe-42f5-98ad-ae4ad1abe4c21033.mspx?mfr=true Search Google on "GPO desktop," "configure desktops gpo, " "gpo settings," etc, for more hits. -- Regards, Ace This posting is provided "AS-IS" with no warranties or guarantees and confers no rights. Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP Microsoft MVP - Directory Services Microsoft Certified Trainer For urgent issues, you may want to contact Microsoft PSS directly. Please check http://support.microsoft.com for regional support phone numbers. Infinite Diversities in Infinite Combinations
Guest CryptiniteDemon Posted April 17, 2008 Posted April 17, 2008 Re: Using group policies to restrict desktop aspects Thanks a lot man. That did the trick. "Michael" wrote: > Open your ADUC (Active Directory Users and Computers). It will help that > you create a new OU (Organization Unit) to contain the users which need the > restrictions. > > After you create the OU, move the users into it and then right click the OU > and select "Properties". The next steps will vary slightly weather you have > the GPMC (Group Policy Management Console) installed. Click on the "Group > Policy" tab. If you do not have GPMC, click on "New". Name your GPO, then > "Edit" it. Under "User Configuration, Administrative Templates, you will > find a plethora of items you can control for these users. > > Do not do these changes to your default domain policy, only to the policy > linked to that specific OU and it will only happen to those users in that > OU. As soon as you move a user into that OU, AD replicates and the user > logs out and in, they will also have the restrictions.
Recommended Posts