How to enable right-click for specific users within an OU
I have recently upgraded one of our NT workstations to Win2000 on Active Directory2000.
THz issue I have is that by policy, all Users in an OU group are denied the right-click context menu.
It is my wish to promote one only of the Users within this OU group, to have the right-click, while maintaining the existing policy of no right-click.
I have tried making the individual an Administer of his "local" machine, but to no avail.
I have created a new OU specifically for this computer and changed / enabled the "Windows Explorer's default context" menu.
I disabled Inheritance of the Default Domain Group Policy
Then I tried to set the over ride option for this OU.
Key to this is that the Operator is part of a specific User Group, and for operational reasons I do not think I can create a specific account just for him.
THz issue I have is that by policy, all Users in an OU group are denied the right-click context menu.
It is my wish to promote one only of the Users within this OU group, to have the right-click, while maintaining the existing policy of no right-click.
I have tried making the individual an Administer of his "local" machine, but to no avail.
I have created a new OU specifically for this computer and changed / enabled the "Windows Explorer's default context" menu.
I disabled Inheritance of the Default Domain Group Policy
Then I tried to set the over ride option for this OU.
Key to this is that the Operator is part of a specific User Group, and for operational reasons I do not think I can create a specific account just for him.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
CJ
This is not as straightforward as I first thought.
The "user" in question, is a system wide "user" account, not an individual account.
In other words this account logon is used by individual persons and system resources.
I am trying to keep this "user" account configuration as is, and change it per computer, to allow certain desktops using this account login, the right-click privilege.
I am at the moment trying to change the settings of these specific Desktops, within a new OU I have created, without much success.
This is not as straightforward as I first thought.
The "user" in question, is a system wide "user" account, not an individual account.
In other words this account logon is used by individual persons and system resources.
I am trying to keep this "user" account configuration as is, and change it per computer, to allow certain desktops using this account login, the right-click privilege.
I am at the moment trying to change the settings of these specific Desktops, within a new OU I have created, without much success.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Cheers for that CJ, I will giver it a go...