Group Policy Question

  • Thread starter Thread starter Kobe Cunanan
  • Start date Start date
K

Kobe Cunanan

Guest
Hi:

I've recently switch environment from Novell to Windows 2003 Server Standard
R2 version. What I wanted to accomplish is I wanted my users when they login
they can only see the network drives that they are assigned to see, right now
when my users login they can see all the map network drives and can only
access the one they have access permission. How do I do this? Also I wanted
to impliment when my users login they have a network printer already
installed and assigned to them.
Thank You in Advance.
 
Re: Group Policy Question

Kobe Cunanan <KobeCunanan@discussions.microsoft.com> wrote:
> Hi:
>
> I've recently switch environment from Novell to Windows 2003 Server
> Standard R2 version. What I wanted to accomplish is I wanted my users
> when they login they can only see the network drives that they are
> assigned to see, right now when my users login they can see all the
> map network drives and can only access the one they have access
> permission. How do I do this?

This isn't a group policy issue. This is something that is very different in
NetWare from Windows and you'll have to get used to it, to a degree.
Frankly, as long as the permissions are configured properly, I don't care if
users can see something - I care whether they can *access* it. However, if
you want to prevent this, -

Make all your shares hidden (as in, SHARENAME$) so they aren't visible when
people browse
Use a login script that maps drives based on AD group membership (you can
use ifmember from the resource kit if you're using batch files, or kixtart,
or try posting in microsoft.public.windows.server.scripting
Put the appropriate users in the appropriate groups and ensure that the
groups themselves have the appropriate permissions on the shared folders

> Also I wanted to impliment when my
> users login they have a network printer already installed and
> assigned to them.

Note that it's best to ask separate/unrelated questions as separate posts to
get the most help in these groups. That said, this question would probably
best be asked in microsoft.public.windows.server.active_directory - it isn't
really a group policy issue either.


> Thank You in Advance.
 
Back
Top