asked on
Disable network access using GPO and AD on clients
Hi,
My company use Windows 2003 Server with Active Directory, and DHCP enabled.
Most of the users works with Win XP and some with vista.
We use a print server and an Isa proxy server too.
From time to time, there are some students that work with us, and they must have limited access to our network. They must have only access to the internet, network printers and No access to the network shares. This is because some of our users share their folders wilth complete access (something that we cant control) , and the student can retrieve some info from that.
I use GPO to hide network places, but if the user puts in the address bar \\computer they can access.
My problems.
Disable access to network shares for the student users.
Enable network printers to this users, maybe a script to install automatically.
Any suggestions ?
Sorry for my english :)
Thanks in advance
My company use Windows 2003 Server with Active Directory, and DHCP enabled.
Most of the users works with Win XP and some with vista.
We use a print server and an Isa proxy server too.
From time to time, there are some students that work with us, and they must have limited access to our network. They must have only access to the internet, network printers and No access to the network shares. This is because some of our users share their folders wilth complete access (something that we cant control) , and the student can retrieve some info from that.
I use GPO to hide network places, but if the user puts in the address bar \\computer they can access.
My problems.
Disable access to network shares for the student users.
Enable network printers to this users, maybe a script to install automatically.
Any suggestions ?
Sorry for my english :)
Thanks in advance
OS SecurityActive DirectoryWindows Server 2003
Last Comment
jimenez
ASKER CERTIFIED SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER
Thank you...
You can disable network browsing but that would make accessing printers hard if already installed. The only other option would be to totally lock down the workstation to allowed programs only but thats probably a bit excessive.
Andy