• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 265
  • Last Modified:

Group Policy without Active Directory Domain - Samba

Hi,

I have a customer who we are speaking to about using Citrix/Terminal Services.
They use SAMBA as their domain controller (please excuse my total lack of knowledge of anything Linux).

Basically whenever we do a Citrix install to a full MS Windows site, we use group policy editor to apply desktop restrictions to users when they connect to the Citrix Server.  This stops them from messing with the control panel, being able to shutdown etc.

The problem here is that they do not have an AD domain, so we cannot do this and I don't know enough about SAMBA to know what the best way of doing this is.

Someone here suggested using Poledit.exe (Windows Policy Editor), but this is a Win 9x/NT tool and I don't know if it's advisable to use it on a W2K3 server?

Many thanks,

James.
0
Codestone
Asked:
Codestone
  • 3
  • 2
  • 2
1 Solution
 
ZabagaRCommented:
You may just have to use the Local Policy Editor on the Citrix/Terminal server itself.

Typically, security policy flows from ou-->domain-->site-->local pc

If you don't have Active Directory, you'd have to edit at the local level, which should work fine.  Under start->programs->administrative tools you can pick the program/icon for editing the local security policy.

0
 
gpriceeeCommented:
Are you famailiar with softheap?
Their Security Administrator might be what you're looking for: http://www.pc-safety.com/secagent/where_to.html
0
 
Big5250Commented:
That's wild, it doesn't come with help.  It was pretty straight forward for me.  Just run the .exe from the machine you want to back up.  It creates a file for the backup.  Copy that file to you new server.  Run the .exe on the new server and do a restore, pointing to the filename that was created.  It will then run through the restore, recreating ports, and printers.

hth
0
Fill in the form and get your FREE NFR key NOW!

Veeam is happy to provide a FREE NFR server license to certified engineers, trainers, and bloggers.  It allows for the non‑production use of Veeam Agent for Microsoft Windows. This license is valid for five workstations and two servers.

 
Big5250Commented:
Sorry, wrong thread!
0
 
ZabagaRCommented:
The "Security Administrator" mentioned by gpriceee looks like it would work - it does the equivalent of editing the local security policy, but with it's own interface instead of microsoft's mmc.....either or......



0
 
gpriceeeCommented:
Hi.  Did you try the softheap software?
0
 
gpriceeeCommented:
Interested
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 3
  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now