Solved

Global and User-based policies and settings...

Posted on 2006-07-05
1
228 Views
Last Modified: 2010-05-18
We have a 10 workstations Windows XP Pro and SBS Windows 2003 Premium environment.

How can I set and lock workstation settings from the server without having to log into each user's account and change those settings. I have heard of Group Policies, but do not know how to use them and need a good guide. But if Group Policies do not include all the settings I have listed below, I need to know what tools to download from Microsoft and others to make this happen.

1. All the items in Control Panel - I want to set the settings for each one on the server, push those settings out and keep them locked
2. Prevent users from saving files/downloads etc. from anywhere but their My Documents folder or a mapped drive
3. Prevent users from installing any software, except for common Java-based on activex components that need to run through the browser
4. Assign global settings for other software like Microsoft Office 2003, FireFox, WinZip etc.

Please provide articles/guides you have actually used and that work.

Thank you for any help!
0
Comment
Question by:loyaliser
1 Comment
 
LVL 26

Accepted Solution

by:
DireOrbAnt earned 500 total points
Comment Utility
Group Policy info:
http://www.microsoft.com/windowsserver2003/technologies/management/grouppolicy/default.mspx

Intro:
http://www.microsoft.com/windowsserver2003/techinfo/overview/gpintro.mspx

I believe most if not all your points can be set through Group Policies assuming the workstations and servers are part of a Windows 2003 domain.

In order to make 2 policies (one for Workstations and one for the servers), create two OUs. One called Workstation and one called Servers. Then move the computers into those OUs.
You then assign each policies to the proper OU.

Assign computers to OUs in "Active Directory Users and Computers"

You want to install "Group Policy Management Console":
http://www.microsoft.com/downloads/details.aspx?FamilyID=0A6D4C24-8CBD-4B35-9272-DD3CBFC81887&displaylang=en
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now