Link to home
Start Free TrialLog in
Avatar of alonig1
alonig1

asked on

GPO on certain users

I want to apply a GPO to restrict them from downloading and running any files. they can browse the internet but not download nor run any files.

I have a total of 10 users, only two will be exclude from that policy.

Should I create a new OU and move the users to that OU and create that policy, or what is the best way to accomplish that?

windows 2008 r2 .
SOLUTION
Avatar of Sekar Chinnakannu
Sekar Chinnakannu
Flag of Singapore image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of alonig1
alonig1

ASKER

Do you know which option should I use to prevent the users of running / downloading programs?
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of alonig1

ASKER

Where does it say not to allow in downloads?
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of alonig1

ASKER

"Create a group and add all the users to AD group.
You can create a policy and add the user group to Security Filtering in GPO and it will work for group of users."

I've created a group where do I apply the gpo on it. on the GPO management window I can see the security group I've created
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of alonig1

ASKER

Where do I do the second part?
Avatar of alonig1

ASKER

found it.

let me see if it work.s
Avatar of alonig1

ASKER

do you know the gpupdate command?
Yes you can....
Avatar of alonig1

ASKER

I set everything, and I can still download.
Avatar of alonig1

ASKER

User generated image
which browser you tried, hope its IE...
Avatar of alonig1

ASKER

yes.
Avatar of alonig1

ASKER

I just set a homepage through GPO the see it the changes apply . and it did.

but still can download from IE.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial