Link to home
Start Free TrialLog in
Avatar of Adabara2009
Adabara2009

asked on

How to Configure Windows 2003 Group Policies

How do i configure group policies in Windows 2003 server to prevent computers not on the domain from getting IP addresses, User not to install softwares on their workstations etc?
I need step by step guide.
Avatar of deroode
deroode
Flag of Netherlands image

A domain is primary to support and control the workstations that are in the domain. You cannot control workstations outside the domain.

You can prevent IP addresses from being handed out, but than you will have to configure your DHCP server to hand out fixed IP addresses (bound to known MAC address)
How many machines in the work environment?
Avatar of Adabara2009
Adabara2009

ASKER

tdukie13
About 178 workstations
One server with windows 2003 server R2
Thanks
You can't use group policy to control computers that are not part of the domain, you could however use Network Access Control (NAC) to control things to some degree.

If you want to stop domain users from installing software you need to ensure they do not have administrator rights on the workstations they are using. Remove the local accounts from the computers, change the local admin passwords and ensure the users log on using their domain accounts.
I do  not know how to configure DHCP to use mac address to restrict issuing IP address
ASKER CERTIFIED SOLUTION
Avatar of samsixty
samsixty
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial