Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

How can I set up by gpo that a certain user can only use the browser, usb devices, Acrobat Reader and Word...

Posted on 2016-10-24
2
Medium Priority
?
111 Views
Last Modified: 2016-11-29
Hi,

we want to set up a new windows 10 machine for guests. It shold be possible to print, open Documents (word, excel, powerpoint and pdf) and browse. the guests should not be able to change anything in the environment. The less they see, the less they can ask...

Are there any gpo-templates or user guides to realize this by a set of gpo s?

Thanks loosain
0
Comment
Question by:loosain
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 56

Accepted Solution

by:
McKnife earned 2000 total points
ID: 41857422
Are you familiar with NTFS permissions or applocker or software restriction policies? Each would easily help you achieve what you want. All three are means to say "this may be run by a certain (group of) user(s) but not that".
0
 

Author Closing Comment

by:loosain
ID: 41906589
made some gpo settings combined with ntfs
0

Featured Post

Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A bad practice commonly found during an account life cycle is to set its password to an initial, insecure password. The Password Reset Tool was developed to make the password reset process easier and more secure.
Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

670 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question