?
Solved

Simple Active directory Question Just learning?

Posted on 2004-04-20
2
Medium Priority
?
174 Views
Last Modified: 2010-04-13
G'day

I was just wondering how you would severely lock down a desktop environment for maybe customer service operators so they can only run certain programs. But also let other staff that use the same computers to not be affected by these restrictions.
I was wondering how i would go about achieving this

I know i has something to do with groups, group policies (objects) and maybe an OU.

Thanks mate for your help
Chad
0
Comment
Question by:Chad_MacArthur
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 

Expert Comment

by:skinnygeek
ID: 10874945
Chad,

This can be done by using the local built-in computer groups on that particular machines.  For example:  you created two users in Active Directory.  User A and User B.  They are both domain users in your Active Directory.  On that particular machine you can add user A to be say "power user" and user B "users".  This will allow user A to install/remove and run applications.  User B on the other hand can only run whatever is installed.  User B cannot install or remove any applications already on the computer.
0
 
LVL 6

Accepted Solution

by:
salvagbf earned 75 total points
ID: 10900502
If you have active directory then you should be using group policies, though this'll only work for 2K/XP clients and XP clients will have more options available.  Granted, if you want to use the options avail for XP, you have to have a 2003 server, or edit the group policy from an XP machine with admin rights on the network.

Open Active Directory Users and Computers, right click on your domain, click properties.  Click on the Group Policies tab and have at it.  You can specify by group membership here.

Alternatively, there's a program called Fortres 101 that we use that really rocks for locking down 98 through XP machines.  They won't be able to do anything you don't specifically let them.  The price isn't that bad either.  Check it out at http://www.fortres.com/products/fortres_101.htm
0

Featured Post

10 Questions to Ask when Buying Backup Software

Choosing the right backup solution for your organization can be a daunting task. To make the selection process easier, ask solution providers these 10 key questions.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
We are witnesses that everyone is saying that our children shouldn't "play" with a technology because it is dangerous. This article is going to prove that they are wrong.
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
Suggested Courses

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question