Workstation policy

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Project Sega - 14 May 2004 20:14 GMT

Hello,

I look after a site which has SBS2003 & around 30 XP workstations. I
would like to roll out a policy which locks things down such as access
to the control panel, bein able to install new software etc. Could
anyone point me at some information? Ideally, I'd like to be able to
do it without visiting each workstation.

Many thanks,
Jon

Reply to this Message

Chad A. Gross [SBS MVP] - 18 May 2004 00:22 GMT

Hi Jon -

Group Policies is your solution. I would recommend going into AD and
creating a new OU for testing - move one test user account and one test
computer account into this OU, create a new Group Policy Object for that OU
and test your settings until you get your environment how you want it.

Whatever you do - don't modify your Default Domain Policy. Create the
policies you want, test them on subsets of your network before deploying
organization-wide. Last thing you want to do is have a mis-configured GPO
lock everyone out of their PCs . . . ;^)

Signature

Chad A. Gross - SBS MVP
SBS ROCKS!

www.msmvps.com/cgross
www.gosbs.org

> Hello,
>
[quoted text clipped - 6 lines]
> Many thanks,
> Jon

Reply to this Message

Curt - 31 Jul 2004 21:53 GMT

Hi Jon -

Group Policies is your solution. I would recommend going into AD and
creating a new OU for testing - move one test user account and one test
computer account into this OU, create a new Group Policy Object for that
OU
and test your settings until you get your environment how you want it.

Whatever you do - don't modify your Default Domain Policy. Create the
policies you want, test them on subsets of your network before deploying

organization-wide. Last thing you want to do is have a mis-configured
GPO
lock everyone out of their PCs . . . ;^)

Signature

Chad A. Gross - SBS MVP
SBS ROCKS!

www.msmvps.com/cgross
www.gosbs.org

> Hello,
>
[quoted text clipped - 6 lines]
> Many thanks,
> Jon

Reply to this Message