• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 134
  • Last Modified:

How can I set up by gpo that a certain user can only use the browser, usb devices, Acrobat Reader and Word...


we want to set up a new windows 10 machine for guests. It shold be possible to print, open Documents (word, excel, powerpoint and pdf) and browse. the guests should not be able to change anything in the environment. The less they see, the less they can ask...

Are there any gpo-templates or user guides to realize this by a set of gpo s?

Thanks loosain
1 Solution
Are you familiar with NTFS permissions or applocker or software restriction policies? Each would easily help you achieve what you want. All three are means to say "this may be run by a certain (group of) user(s) but not that".
loosainAuthor Commented:
made some gpo settings combined with ntfs
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Tackle projects and never again get stuck behind a technical roadblock.
Join Now