We help IT Professionals succeed at work.

GPO on certain users

141 Views
Last Modified: 2018-05-24
I want to apply a GPO to restrict them from downloading and running any files. they can browse the internet but not download nor run any files.

I have a total of 10 users, only two will be exclude from that policy.

Should I create a new OU and move the users to that OU and create that policy, or what is the best way to accomplish that?

windows 2008 r2 .
Comment
Watch Question

Sekar ChinnakannuStaff Engineer
CERTIFIED EXPERT
Commented:
This problem has been solved!
(Unlock this solution with a 7-day Free Trial)
UNLOCK SOLUTION

Author

Commented:
Do you know which option should I use to prevent the users of running / downloading programs?
Sekar ChinnakannuStaff Engineer
CERTIFIED EXPERT
Commented:
This problem has been solved!
(Unlock this solution with a 7-day Free Trial)
UNLOCK SOLUTION

Author

Commented:
Where does it say not to allow in downloads?
Sekar ChinnakannuStaff Engineer
CERTIFIED EXPERT
Commented:
This problem has been solved!
(Unlock this solution with a 7-day Free Trial)
UNLOCK SOLUTION

Author

Commented:
"Create a group and add all the users to AD group.
You can create a policy and add the user group to Security Filtering in GPO and it will work for group of users."

I've created a group where do I apply the gpo on it. on the GPO management window I can see the security group I've created
Staff Engineer
CERTIFIED EXPERT
Commented:
This problem has been solved!
(Unlock this solution with a 7-day Free Trial)
UNLOCK SOLUTION

Author

Commented:
Where do I do the second part?

Author

Commented:
found it.

let me see if it work.s

Author

Commented:
do you know the gpupdate command?
Sekar ChinnakannuStaff Engineer
CERTIFIED EXPERT

Commented:
Yes you can....

Author

Commented:
I set everything, and I can still download.

Author

Commented:
gpo.JPG
Sekar ChinnakannuStaff Engineer
CERTIFIED EXPERT

Commented:
which browser you tried, hope its IE...

Author

Commented:
yes.

Author

Commented:
I just set a homepage through GPO the see it the changes apply . and it did.

but still can download from IE.
CERTIFIED EXPERT
Distinguished Expert 2019
Commented:
This problem has been solved!
(Unlock this solution with a 7-day Free Trial)
UNLOCK SOLUTION

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions