Solved

Simple Active directory Question Just learning?

Posted on 2004-04-20
2
168 Views
Last Modified: 2010-04-13
G'day

I was just wondering how you would severely lock down a desktop environment for maybe customer service operators so they can only run certain programs. But also let other staff that use the same computers to not be affected by these restrictions.
I was wondering how i would go about achieving this

I know i has something to do with groups, group policies (objects) and maybe an OU.

Thanks mate for your help
Chad
0
Comment
Question by:Chad_MacArthur
2 Comments
 

Expert Comment

by:skinnygeek
ID: 10874945
Chad,

This can be done by using the local built-in computer groups on that particular machines.  For example:  you created two users in Active Directory.  User A and User B.  They are both domain users in your Active Directory.  On that particular machine you can add user A to be say "power user" and user B "users".  This will allow user A to install/remove and run applications.  User B on the other hand can only run whatever is installed.  User B cannot install or remove any applications already on the computer.
0
 
LVL 6

Accepted Solution

by:
salvagbf earned 25 total points
ID: 10900502
If you have active directory then you should be using group policies, though this'll only work for 2K/XP clients and XP clients will have more options available.  Granted, if you want to use the options avail for XP, you have to have a 2003 server, or edit the group policy from an XP machine with admin rights on the network.

Open Active Directory Users and Computers, right click on your domain, click properties.  Click on the Group Policies tab and have at it.  You can specify by group membership here.

Alternatively, there's a program called Fortres 101 that we use that really rocks for locking down 98 through XP machines.  They won't be able to do anything you don't specifically let them.  The price isn't that bad either.  Check it out at http://www.fortres.com/products/fortres_101.htm
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
HOW TO: Connect to the VMware vSphere Hypervisor 6.5 (ESXi 6.5) using the vSphere (HTML5 Web) Host Client 6.5, and perform a simple configuration task of adding a new VMFS 6 datastore.
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now