Group Policy without Active Directory Domain - Samba


I have a customer who we are speaking to about using Citrix/Terminal Services.
They use SAMBA as their domain controller (please excuse my total lack of knowledge of anything Linux).

Basically whenever we do a Citrix install to a full MS Windows site, we use group policy editor to apply desktop restrictions to users when they connect to the Citrix Server.  This stops them from messing with the control panel, being able to shutdown etc.

The problem here is that they do not have an AD domain, so we cannot do this and I don't know enough about SAMBA to know what the best way of doing this is.

Someone here suggested using Poledit.exe (Windows Policy Editor), but this is a Win 9x/NT tool and I don't know if it's advisable to use it on a W2K3 server?

Many thanks,

Who is Participating?
gpriceeeConnect With a Mentor Commented:
Are you famailiar with softheap?
Their Security Administrator might be what you're looking for:
You may just have to use the Local Policy Editor on the Citrix/Terminal server itself.

Typically, security policy flows from ou-->domain-->site-->local pc

If you don't have Active Directory, you'd have to edit at the local level, which should work fine.  Under start->programs->administrative tools you can pick the program/icon for editing the local security policy.

That's wild, it doesn't come with help.  It was pretty straight forward for me.  Just run the .exe from the machine you want to back up.  It creates a file for the backup.  Copy that file to you new server.  Run the .exe on the new server and do a restore, pointing to the filename that was created.  It will then run through the restore, recreating ports, and printers.

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Sorry, wrong thread!
The "Security Administrator" mentioned by gpriceee looks like it would work - it does the equivalent of editing the local security policy, but with it's own interface instead of microsoft's mmc.....either or......

Hi.  Did you try the softheap software?
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.