Solved

Group Policy Problem

Posted on 2008-10-08
7
197 Views
Last Modified: 2012-05-05
Hi Guys
i need to re-strict access to certain pc's on our network i have tried this with GPO but it does not work, i have OU applied to speccific users and these work fine but when i put the pc's i require to lock down in a ou an setup a policy on it nothing works, i need this for a group of specific people but i cant move them out of there existing OU

Any Ideas

Thanks

0
Comment
Question by:ciandirrane
  • 3
  • 3
7 Comments
 
LVL 38

Expert Comment

by:ChiefIT
ID: 22667256
What are we restricting access to, (internet, file shares, logging onto that particular computer)???
0
 

Author Comment

by:ciandirrane
ID: 22667263
Desktop Icons and to install a default printer and access to specific shares
0
 
LVL 38

Expert Comment

by:ChiefIT
ID: 22667391
Hi ciandirrane:

Your looking at the differences between Apples, Oranges, and Pears:

Desktop Icons:
Not quite sure what you want to do with these icons, can you specify for me? Do you want these users not to delete these Icons? Do you want them to have a default desktop?

Default printer:
This is usually best done with a logon script:
I avoid scripting like the plague, so it will be a good idea if we get some help on this. Once we get to the root of exactly what you want to do for all three tasks, I can get us some scripting help for us.

Access to shares:
This is done on the share itself. Going to the share and setting the NTFS permissions and Share permissions will prevent them from accessing the shares. If you don't want them to see the shares, we can involk Access Based Enumeration. ABE may be a little more advanced than you might want to go at this time and I find that preventing access to the shares is good in most all cases.
0
U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

 

Author Comment

by:ciandirrane
ID: 22667413
Hi
i want them to have a default Desktop on these specific machines i.e. pc1 and pc2, but when they logon to pc3 i want them to be able to use the control panel our change their desktop, i have worked out a vb script to set the default printer
If i create a OU with the pc's in them and apply a policy, it does not apply

Thanks

0
 
LVL 38

Expert Comment

by:ChiefIT
ID: 22667457
Go to the command prompt and type of the DC:
GPupdate /force

Does that enforce your group policy to those computers?
0
 
LVL 11

Accepted Solution

by:
loftyworm earned 500 total points
ID: 22671412
I think using Loopback Processing will do the trick for you, it is near the bottom
http://technet.microsoft.com/en-us/library/bb742376.aspx
0
 

Author Closing Comment

by:ciandirrane
ID: 31504145
Thanks
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Find enabled users in a OU 24 49
Distinguished username as email address 4 40
Server 2008 Not services listed 23 43
How to use Powershell data from SQL 151 57
Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
In-place Upgrading Dirsync to Azure AD Connect
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

680 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question