GPO on certain users

alonig1
alonig1 used Ask the Experts™
on
I want to apply a GPO to restrict them from downloading and running any files. they can browse the internet but not download nor run any files.

I have a total of 10 users, only two will be exclude from that policy.

Should I create a new OU and move the users to that OU and create that policy, or what is the best way to accomplish that?

windows 2008 r2 .
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Create a group and add all the users to AD group.
You can create a policy and add the user group to Security Filtering in GPO and it will work for group of users.

Author

Commented:
Do you know which option should I use to prevent the users of running / downloading programs?
In GPO -> User Configuration -> Policies -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Author

Commented:
Where does it say not to allow in downloads?
Goto allow file downloads and read the content.

Author

Commented:
"Create a group and add all the users to AD group.
You can create a policy and add the user group to Security Filtering in GPO and it will work for group of users."

I've created a group where do I apply the gpo on it. on the GPO management window I can see the security group I've created
- Create AD group and add the users
- Create a new policy with settings as I mentioned ID: 42070899 and under security filtering add the group of users to apply the policy.

Author

Commented:
Where do I do the second part?

Author

Commented:
found it.

let me see if it work.s

Author

Commented:
do you know the gpupdate command?
Yes you can....

Author

Commented:
I set everything, and I can still download.

Author

Commented:
gpo.JPG
which browser you tried, hope its IE...

Author

Commented:
yes.

Author

Commented:
I just set a homepage through GPO the see it the changes apply . and it did.

but still can download from IE.
Distinguished Expert 2018
Commented:
Did you force the update on the server?

gpupdate /force

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial