Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 204
  • Last Modified:

Group Policy Problem

Hi Guys
i need to re-strict access to certain pc's on our network i have tried this with GPO but it does not work, i have OU applied to speccific users and these work fine but when i put the pc's i require to lock down in a ou an setup a policy on it nothing works, i need this for a group of specific people but i cant move them out of there existing OU

Any Ideas

Thanks

0
ciandirrane
Asked:
ciandirrane
  • 3
  • 3
1 Solution
 
ChiefITCommented:
What are we restricting access to, (internet, file shares, logging onto that particular computer)???
0
 
ciandirraneAuthor Commented:
Desktop Icons and to install a default printer and access to specific shares
0
 
ChiefITCommented:
Hi ciandirrane:

Your looking at the differences between Apples, Oranges, and Pears:

Desktop Icons:
Not quite sure what you want to do with these icons, can you specify for me? Do you want these users not to delete these Icons? Do you want them to have a default desktop?

Default printer:
This is usually best done with a logon script:
I avoid scripting like the plague, so it will be a good idea if we get some help on this. Once we get to the root of exactly what you want to do for all three tasks, I can get us some scripting help for us.

Access to shares:
This is done on the share itself. Going to the share and setting the NTFS permissions and Share permissions will prevent them from accessing the shares. If you don't want them to see the shares, we can involk Access Based Enumeration. ABE may be a little more advanced than you might want to go at this time and I find that preventing access to the shares is good in most all cases.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
ciandirraneAuthor Commented:
Hi
i want them to have a default Desktop on these specific machines i.e. pc1 and pc2, but when they logon to pc3 i want them to be able to use the control panel our change their desktop, i have worked out a vb script to set the default printer
If i create a OU with the pc's in them and apply a policy, it does not apply

Thanks

0
 
ChiefITCommented:
Go to the command prompt and type of the DC:
GPupdate /force

Does that enforce your group policy to those computers?
0
 
loftywormCommented:
I think using Loopback Processing will do the trick for you, it is near the bottom
http://technet.microsoft.com/en-us/library/bb742376.aspx
0
 
ciandirraneAuthor Commented:
Thanks
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now