Solved

Global and User-based policies and settings...

Posted on 2006-07-05
1
233 Views
Last Modified: 2010-05-18
We have a 10 workstations Windows XP Pro and SBS Windows 2003 Premium environment.

How can I set and lock workstation settings from the server without having to log into each user's account and change those settings. I have heard of Group Policies, but do not know how to use them and need a good guide. But if Group Policies do not include all the settings I have listed below, I need to know what tools to download from Microsoft and others to make this happen.

1. All the items in Control Panel - I want to set the settings for each one on the server, push those settings out and keep them locked
2. Prevent users from saving files/downloads etc. from anywhere but their My Documents folder or a mapped drive
3. Prevent users from installing any software, except for common Java-based on activex components that need to run through the browser
4. Assign global settings for other software like Microsoft Office 2003, FireFox, WinZip etc.

Please provide articles/guides you have actually used and that work.

Thank you for any help!
0
Comment
Question by:loyaliser
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 26

Accepted Solution

by:
DireOrbAnt earned 500 total points
ID: 17045118
Group Policy info:
http://www.microsoft.com/windowsserver2003/technologies/management/grouppolicy/default.mspx

Intro:
http://www.microsoft.com/windowsserver2003/techinfo/overview/gpintro.mspx

I believe most if not all your points can be set through Group Policies assuming the workstations and servers are part of a Windows 2003 domain.

In order to make 2 policies (one for Workstations and one for the servers), create two OUs. One called Workstation and one called Servers. Then move the computers into those OUs.
You then assign each policies to the proper OU.

Assign computers to OUs in "Active Directory Users and Computers"

You want to install "Group Policy Management Console":
http://www.microsoft.com/downloads/details.aspx?FamilyID=0A6D4C24-8CBD-4B35-9272-DD3CBFC81887&displaylang=en
0

Featured Post

Raise the IQ of Your IT Alerts

From IT major incidents to manufacturing line slowdowns, every business process generates insights that need to reach the people required to take action. You need a platform that integrates with your business tools to create fully enabled DevOps toolchains.

You need xMatters.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

718 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question