Solved

Simple Active directory Question Just learning?

Posted on 2004-04-20
2
173 Views
Last Modified: 2010-04-13
G'day

I was just wondering how you would severely lock down a desktop environment for maybe customer service operators so they can only run certain programs. But also let other staff that use the same computers to not be affected by these restrictions.
I was wondering how i would go about achieving this

I know i has something to do with groups, group policies (objects) and maybe an OU.

Thanks mate for your help
Chad
0
Comment
Question by:Chad_MacArthur
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 

Expert Comment

by:skinnygeek
ID: 10874945
Chad,

This can be done by using the local built-in computer groups on that particular machines.  For example:  you created two users in Active Directory.  User A and User B.  They are both domain users in your Active Directory.  On that particular machine you can add user A to be say "power user" and user B "users".  This will allow user A to install/remove and run applications.  User B on the other hand can only run whatever is installed.  User B cannot install or remove any applications already on the computer.
0
 
LVL 6

Accepted Solution

by:
salvagbf earned 25 total points
ID: 10900502
If you have active directory then you should be using group policies, though this'll only work for 2K/XP clients and XP clients will have more options available.  Granted, if you want to use the options avail for XP, you have to have a 2003 server, or edit the group policy from an XP machine with admin rights on the network.

Open Active Directory Users and Computers, right click on your domain, click properties.  Click on the Group Policies tab and have at it.  You can specify by group membership here.

Alternatively, there's a program called Fortres 101 that we use that really rocks for locking down 98 through XP machines.  They won't be able to do anything you don't specifically let them.  The price isn't that bad either.  Check it out at http://www.fortres.com/products/fortres_101.htm
0

Featured Post

What Is Transaction Monitoring and who needs it?

Synthetic Transaction Monitoring that you need for the day to day, which ensures your business website keeps running optimally, and that there is no downtime to impact your customer experience.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
In this blog post, we’ll look at how ClickHouse performs in a general analytical workload using the star schema benchmark test.
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
This is my first video review of Microsoft Bookings, I will be doing a part two with a bit more information, but wanted to get this out to you folks.

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question