Group Policy Question

[Guest Kobe Cunanan]

Hi:

 

I've recently switch environment from Novell to Windows 2003 Server Standard

R2 version. What I wanted to accomplish is I wanted my users when they login

they can only see the network drives that they are assigned to see, right now

when my users login they can see all the map network drives and can only

access the one they have access permission. How do I do this? Also I wanted

to impliment when my users login they have a network printer already

installed and assigned to them.

Thank You in Advance.

[Guest Lanwench [MVP - Exchange]]

Re: Group Policy Question

 

Kobe Cunanan <KobeCunanan@discussions.microsoft.com> wrote:

> Hi:

>

> I've recently switch environment from Novell to Windows 2003 Server

> Standard R2 version. What I wanted to accomplish is I wanted my users

> when they login they can only see the network drives that they are

> assigned to see, right now when my users login they can see all the

> map network drives and can only access the one they have access

> permission. How do I do this?

 

This isn't a group policy issue. This is something that is very different in

NetWare from Windows and you'll have to get used to it, to a degree.

Frankly, as long as the permissions are configured properly, I don't care if

users can see something - I care whether they can *access* it. However, if

you want to prevent this, -

 

Make all your shares hidden (as in, SHARENAME$) so they aren't visible when

people browse

Use a login script that maps drives based on AD group membership (you can

use ifmember from the resource kit if you're using batch files, or kixtart,

or try posting in microsoft.public.windows.server.scripting

Put the appropriate users in the appropriate groups and ensure that the

groups themselves have the appropriate permissions on the shared folders

> Also I wanted to impliment when my

> users login they have a network printer already installed and

> assigned to them.

 

Note that it's best to ask separate/unrelated questions as separate posts to

get the most help in these groups. That said, this question would probably

best be asked in microsoft.public.windows.server.active_directory - it isn't

really a group policy issue either.

 

> Thank You in Advance.