[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 176
  • Last Modified:

Simple Active directory Question Just learning?

G'day

I was just wondering how you would severely lock down a desktop environment for maybe customer service operators so they can only run certain programs. But also let other staff that use the same computers to not be affected by these restrictions.
I was wondering how i would go about achieving this

I know i has something to do with groups, group policies (objects) and maybe an OU.

Thanks mate for your help
Chad
0
Chad_MacArthur
Asked:
Chad_MacArthur
1 Solution
 
skinnygeekCommented:
Chad,

This can be done by using the local built-in computer groups on that particular machines.  For example:  you created two users in Active Directory.  User A and User B.  They are both domain users in your Active Directory.  On that particular machine you can add user A to be say "power user" and user B "users".  This will allow user A to install/remove and run applications.  User B on the other hand can only run whatever is installed.  User B cannot install or remove any applications already on the computer.
0
 
salvagbfCommented:
If you have active directory then you should be using group policies, though this'll only work for 2K/XP clients and XP clients will have more options available.  Granted, if you want to use the options avail for XP, you have to have a 2003 server, or edit the group policy from an XP machine with admin rights on the network.

Open Active Directory Users and Computers, right click on your domain, click properties.  Click on the Group Policies tab and have at it.  You can specify by group membership here.

Alternatively, there's a program called Fortres 101 that we use that really rocks for locking down 98 through XP machines.  They won't be able to do anything you don't specifically let them.  The price isn't that bad either.  Check it out at http://www.fortres.com/products/fortres_101.htm
0

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now