Solved

Newbie AD setting-up question

Posted on 2004-03-20
5
213 Views
Last Modified: 2010-04-19
Ok,

I have installed Windows Server, set up an AD and created some more users (which are able to be logged into from other machines on the LAN).  Now I need to be able to implemet  a policy on certain users (groups?).  I assume this is through the group policy thing but edtiing this edits every single user on the server, not just the ones that I want to set rights for.

An answer as to how to set an individual user's (group's) rights would be great or even a link somewhere that explains this.

Thanks,

Adam
0
Comment
Question by:adamkimber
  • 2
5 Comments
 
LVL 16

Expert Comment

by:ahmedbahgat
ID: 10642626
0
 
LVL 16

Accepted Solution

by:
JamesDS earned 125 total points
ID: 10643907
adamkimber

Policies cannot be applied to groups such that the policy only applies to those members of a group

I suggest you move your users into an OU (not a container) on their own and create a new group policy on that OU just for them.

Cheers

JamesDS
0
 

Author Comment

by:adamkimber
ID: 10644191
I've now create an OU, put the restricted users into it but my restrictions aren't being applied to them.  They seem to have inherited the default rules (Not Configured), will this over-ride my OU rules?

Maybe I'm missing something, I right-click onn the OU, properties > new policy > edit the policy?

Adam
0
 
LVL 16

Expert Comment

by:JamesDS
ID: 10647056
adamkimber

Yup, right-click on the OU, properties > new policy > edit the policy

Make a change to the policy and then reboot one of the client machines being used by your restricted users (create a test user and login with it on your own machine to save annoying users)

Windows XP comes with the RSOP tool, another MMC snapin, you can also downoad the GPMC from here which will help you define and control your Group Policy setup:

http://www.microsoft.com/windowsserver2003/technologies/management/grouppolicy/default.mspx

Lots of excellent W2k3 GPO information there too
Cheers

JamesDS
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now