We help IT Professionals succeed at work.

Member Profiles and Policies

RobotMan
RobotMan asked
on
 I am using Windows 2000 server on a Dell PowerEdge 2500 Server.  I am trying to set up profiles and/or policies for a group of workstations to use.  I want to enable the users to only use certain programs (i.e. Internet Browsers, Word Processors, and a few others).  I also want to restict the users so they cannot see/do critical things (i.e. install new software, uninstall current software, view or modify Control Panel, run programs through "Run", modify registry settings, etc.  

  I have read a little about manditory profiles and they seem to be the most useful for my problem.  I want to serve a very limited new desktop to every user.  When they logoff, I do not want to store the changes that they made, though I do want to allow them to change things like monitor resolution, etc.  I also want to link each user to a shared folder on the server so that they can download from instructors.  Furthermore, each user has a folder set up on the server so that they can save their files.  I want to set this folder up as their default save path.

  I am new to Windows server (have a lot of experience w/ Macs) and would really appreciate all the help and specificity that can be offered.  Thank you in advance.

P.S.  I have assigned 200 points becuase of all of the detail that I am asking for.  I am pretty sure that all of these things are actually pretty easy, common place things to do for someone who know Windows 2k Server very well, but I have (after all) asked for a lot of specifics.

Thank you very much  :-)
Comment
Watch Question

CERTIFIED EXPERT

Commented:
Check here:
Under 'users and computers' user profiles
http://www.microsoft.com/windows2000/en/server/help/

CERTIFIED EXPERT
Top Expert 2007
Commented:

Here is some good info :
From: snirh   Date: 03/28/2001 12:39AM PST Group policy planning with screen shots
                 
      http://www.microsoft.com/WINDOWS2000/library/planning/management/groupsteps.asp

http://www.microsoft.com/WINDOWS2000/library/planning/management/groupsteps.asp
                                   http://www.microsoft.com/windows2000/techinfo/howitworks/management/grouppolicyintro.asp

 Windows 2000 Group Policy White Paper
                                         http://www.microsoft.com/windows2000/techinfo/howitworks/management/grouppolwp.asp

Step by Step Guide to Managing the Group Policy Feature Set
                                         http://www.microsoft.com/windows2000/techinfo/reskit/samplechapters/dsec/dsec_pol_zbgy.asp

"Troubleshooting Group Policy in Windows 2000"
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/windows2000serv/support/tshootgp.asp

               and

               Wayne's Windows NT Administration Tips
               http://is-it-true.org/nt/nt2000/atips/index.shtml


-------------------

------------
From: dew_associates    Date: 07/30/2001 12:07AM PST policy tools
             
         For system-policy files, the best tool I?ve come across is Tools4ever?s Policy Template Editor. It's
      a must-have utility for creating custom .adm policy template files that contain custom Registry settings
         (the files from which .pol system-policy files are created). You can use Policy Template Editor?s GUI
       to create per-machine or per-user policies?a much easier process than creating and editing the .adm
               files manually.

        Another handy resource for creating custom system-policy files is the NT Zero Administration Kit (ZAK),
    which includes several excellent enhanced and custom .adm files for the OS and for particular applications.
          Using the ZAK?s templates files, you can build a much more comprehensive system-policy file than you
               can with NT?s default templates (i.e., winnt.adm and common.adm).

          As for user profiles, you?ll unfortunately find a dearth of profile-management utilities for NT. In
      fact, I?ve long felt that third-party utility vendors have all but ignored user profiles. The Microsoft
       Windows NT Server 4.0 Resource Kit includes one profile-management utility, delprof.exe, a command-line
   tool that helps with the deletion of a machine?s unused user profiles. (For more information about Delprof,
        see Mark Minasi, This Old Resource Kit, ?DELPROF,? July 1998.)

     Unfortunately, Delprof represents the extent of Microsoft?s built-in user-profile-management tools.
    Microsoft never shipped an NT 4.0-updated version of the handy User Profile Editor utility (upedit.exe)
      that shipped with the NT 3.5x resource kits. However, both Win2K and NT 4.0 support some techniques
        that might help you create your user profiles.

    To create a master (or template) user profile, you simply need to create a user account for that profile,
   then log on as the template user. After you configure the profile to your liking?including applications
       and per-user Registry settings for the desktop?you can then use the Control Panel System applet?s User
  Profile tab to copy that profile to a different location. This dialog box also lets you assign permissions
       for the users or groups that will use a particular user profile. If you?d rather not create a template
      or master version from scratch, you can copy a user profile by simply copying an actual user?s existing
      profile (from a machine that holds the desired version of the user?s profile). However, if you use this
       method, you need to ensure that this profile contains no sensitive data that might compromise security
               or user privacy.

------------------------
I hope this helps !
CERTIFIED EXPERT

Commented:
Go here for additional info on system policy:  http://www.dewassoc.com/support/index.html
and click on
Windows 2000  |  Windows 2000 FAQ  |  then click on 'system policy' in right-hand pane


CERTIFIED EXPERT

Commented:
Also if you have Active Directory the Windows 2000 Server Resource Kit advises that you use Group Policy instead of
mandatory profiles.

Author

Commented:
shekerra,
  I have tried to use the Active Directory, but don't really understand how to use it set up policies or profiles.  

Author

Commented:
SysExpert,
  I have already seen all the papers you sibmitted.  I've read books on this too, but I still don't know what specifiacally to do.
CERTIFIED EXPERT

Commented:

Explore More ContentExplore courses, solutions, and other research materials related to this topic.