Solved

Global and User-based policies and settings...

Posted on 2006-07-05
1
231 Views
Last Modified: 2010-05-18
We have a 10 workstations Windows XP Pro and SBS Windows 2003 Premium environment.

How can I set and lock workstation settings from the server without having to log into each user's account and change those settings. I have heard of Group Policies, but do not know how to use them and need a good guide. But if Group Policies do not include all the settings I have listed below, I need to know what tools to download from Microsoft and others to make this happen.

1. All the items in Control Panel - I want to set the settings for each one on the server, push those settings out and keep them locked
2. Prevent users from saving files/downloads etc. from anywhere but their My Documents folder or a mapped drive
3. Prevent users from installing any software, except for common Java-based on activex components that need to run through the browser
4. Assign global settings for other software like Microsoft Office 2003, FireFox, WinZip etc.

Please provide articles/guides you have actually used and that work.

Thank you for any help!
0
Comment
Question by:loyaliser
1 Comment
 
LVL 26

Accepted Solution

by:
DireOrbAnt earned 500 total points
ID: 17045118
Group Policy info:
http://www.microsoft.com/windowsserver2003/technologies/management/grouppolicy/default.mspx

Intro:
http://www.microsoft.com/windowsserver2003/techinfo/overview/gpintro.mspx

I believe most if not all your points can be set through Group Policies assuming the workstations and servers are part of a Windows 2003 domain.

In order to make 2 policies (one for Workstations and one for the servers), create two OUs. One called Workstation and one called Servers. Then move the computers into those OUs.
You then assign each policies to the proper OU.

Assign computers to OUs in "Active Directory Users and Computers"

You want to install "Group Policy Management Console":
http://www.microsoft.com/downloads/details.aspx?FamilyID=0A6D4C24-8CBD-4B35-9272-DD3CBFC81887&displaylang=en
0

Featured Post

U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question