Using group policies to restrict desktop aspects

  • Thread starter Thread starter CryptiniteDemon
  • Start date Start date
C

CryptiniteDemon

Guest
Can anyone give me a step by step guide or link me to some place that will
show me how to set up group policies properly?

I want to make it to where 20 users have restricted desktop access when they
log on. For the purpose of this, let's just say that the recycling bin won't
be visible to these users.

How would I go about doing this? I've tried a few things and I can't get it
to work when I have those users log into the domain.

Thanks
 
Re: Using group policies to restrict desktop aspects

Open your ADUC (Active Directory Users and Computers). It will help that
you create a new OU (Organization Unit) to contain the users which need the
restrictions.

After you create the OU, move the users into it and then right click the OU
and select "Properties". The next steps will vary slightly weather you have
the GPMC (Group Policy Management Console) installed. Click on the "Group
Policy" tab. If you do not have GPMC, click on "New". Name your GPO, then
"Edit" it. Under "User Configuration, Administrative Templates, you will
find a plethora of items you can control for these users.

Do not do these changes to your default domain policy, only to the policy
linked to that specific OU and it will only happen to those users in that
OU. As soon as you move a user into that OU, AD replicates and the user
logs out and in, they will also have the restrictions.


"CryptiniteDemon" <CryptiniteDemon@discussions.microsoft.com> wrote in
message news:E9F2F734-E367-4395-B99A-9455A4E86F9F@microsoft.com...
> Can anyone give me a step by step guide or link me to some place that will
> show me how to set up group policies properly?
>
> I want to make it to where 20 users have restricted desktop access when
> they
> log on. For the purpose of this, let's just say that the recycling bin
> won't
> be visible to these users.
>
> How would I go about doing this? I've tried a few things and I can't get
> it
> to work when I have those users log into the domain.
>
> Thanks
 
Re: Using group policies to restrict desktop aspects

In news:E9F2F734-E367-4395-B99A-9455A4E86F9F@microsoft.com,
CryptiniteDemon <CryptiniteDemon@discussions.microsoft.com> typed:
> Can anyone give me a step by step guide or link me to some place that
> will show me how to set up group policies properly?
>
> I want to make it to where 20 users have restricted desktop access
> when they log on. For the purpose of this, let's just say that the
> recycling bin won't be visible to these users.
>
> How would I go about doing this? I've tried a few things and I can't
> get it to work when I have those users log into the domain.
>
> Thanks

Depending on which OS you have, there are anywhere from 700 - 1000 different
settings and desktop settings options differ.

Working with Group Policy:
http://www.petri.co.il/working_with_group_policy.htm

Best Practices for Designing Group Policy
http://www.windowsnetworking.com/articles_tutorials/Best-Practices-Designing-Group-Policy.html

Configuring User Group Policy Settings
http://technet2.microsoft.com/windo...92fe-42f5-98ad-ae4ad1abe4c21033.mspx?mfr=true

Search Google on "GPO desktop," "configure desktops gpo, " "gpo settings,"
etc, for more hits.

--
Regards,
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT,
MVP Microsoft MVP - Directory Services
Microsoft Certified Trainer

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Infinite Diversities in Infinite Combinations
 
Re: Using group policies to restrict desktop aspects

Thanks a lot man. That did the trick.

"Michael" wrote:

> Open your ADUC (Active Directory Users and Computers). It will help that
> you create a new OU (Organization Unit) to contain the users which need the
> restrictions.
>
> After you create the OU, move the users into it and then right click the OU
> and select "Properties". The next steps will vary slightly weather you have
> the GPMC (Group Policy Management Console) installed. Click on the "Group
> Policy" tab. If you do not have GPMC, click on "New". Name your GPO, then
> "Edit" it. Under "User Configuration, Administrative Templates, you will
> find a plethora of items you can control for these users.
>
> Do not do these changes to your default domain policy, only to the policy
> linked to that specific OU and it will only happen to those users in that
> OU. As soon as you move a user into that OU, AD replicates and the user
> logs out and in, they will also have the restrictions.
 
Back
Top