Newbie group policy Question!

Discussion in 'Windows Server Systems' started by Ironvid, Nov 7, 2006.

  1. Ironvid

    Ironvid OSNN One Post Wonder

    Messages:
    3
    Hi

    I want to use group policy's to restrict users access to some windows settings e.g. display settings and give people a corperate backgound.
    I am using 2003 server and the users are all XP pro

    my question is how can I restrict some users from accessing the display settings and not others.
    e.g.

    Domain/users cannot access the display settings and have background A
    Domain/power users can access the display settings and have background B

    Hope this makes sense, thanks for any help! :)
     
  2. madmatt

    madmatt Bow Down to the King Political User

    Messages:
    13,312
    Location:
    New York
    Create different OU's for different users.

    Users
    '-- Restricted Users
    '-- Non-Restricted Users

    Create different policies for each OU.

    Apply the restricted policy to the restricted users OU.
     
  3. Ironvid

    Ironvid OSNN One Post Wonder

    Messages:
    3
    Hi

    thanks for that!

    I understsand the OU's and how to create them; but I have no Idea on how to create new policy's and and apply them to each OU.

    I am trawling through the help files, so any help on how to do this would be great!

    thanks in advance!
     
  4. madmatt

    madmatt Bow Down to the King Political User

    Messages:
    13,312
    Location:
    New York
    Ironvid likes this.
  5. fitz

    fitz Just Floating Along Staff Member Political User Folding Team

    Messages:
    4,076
    Location:
    Chicagoland
    you could also get all fancy and keep everyone in one OU if you need to and create seperate policies and set the security on each policy accordingly to apply to the appropriate security group.
     
  6. Ironvid

    Ironvid OSNN One Post Wonder

    Messages:
    3
    Thanks

    I already had the Group Policy Management Console but could not see how to create and apply the policy's.

    I think I have got what I needed now!


    Thanks All! :)
     
  7. Bootsy

    Bootsy Huh?

    Messages:
    1,124
    Location:
    Miami, Fl

    Thats basically what I do, I have all users in one OU (for each location) and set up different GPOs for them.

    All you have to do is open up the Group Policy Manager and navigate to where said users are. Right click and "Create and link GPO here". Then right click and edit it the way you want to.