Solved

Simple Active directory Question Just learning?

Posted on 2004-04-20
2
170 Views
Last Modified: 2010-04-13
G'day

I was just wondering how you would severely lock down a desktop environment for maybe customer service operators so they can only run certain programs. But also let other staff that use the same computers to not be affected by these restrictions.
I was wondering how i would go about achieving this

I know i has something to do with groups, group policies (objects) and maybe an OU.

Thanks mate for your help
Chad
0
Comment
Question by:Chad_MacArthur
2 Comments
 

Expert Comment

by:skinnygeek
ID: 10874945
Chad,

This can be done by using the local built-in computer groups on that particular machines.  For example:  you created two users in Active Directory.  User A and User B.  They are both domain users in your Active Directory.  On that particular machine you can add user A to be say "power user" and user B "users".  This will allow user A to install/remove and run applications.  User B on the other hand can only run whatever is installed.  User B cannot install or remove any applications already on the computer.
0
 
LVL 6

Accepted Solution

by:
salvagbf earned 25 total points
ID: 10900502
If you have active directory then you should be using group policies, though this'll only work for 2K/XP clients and XP clients will have more options available.  Granted, if you want to use the options avail for XP, you have to have a 2003 server, or edit the group policy from an XP machine with admin rights on the network.

Open Active Directory Users and Computers, right click on your domain, click properties.  Click on the Group Policies tab and have at it.  You can specify by group membership here.

Alternatively, there's a program called Fortres 101 that we use that really rocks for locking down 98 through XP machines.  They won't be able to do anything you don't specifically let them.  The price isn't that bad either.  Check it out at http://www.fortres.com/products/fortres_101.htm
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
When you’re making plans to join the modern business race, you should analyze various details that may affect your results. Nowadays, millions of businesses are trying to grow into established and appreciated professional enterprises.
This tutorial gives a high-level tour of the interface of Marketo (a marketing automation tool to help businesses track and engage prospective customers and drive them to purchase). You will see the main areas including Marketing Activities, Design …
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question