Newbie group policy Question!

[Ironvid]

Hi

I want to use group policy's to restrict users access to some windows settings e.g. display settings and give people a corperate backgound.
I am using 2003 server and the users are all XP pro

my question is how can I restrict some users from accessing the display settings and not others.
e.g.

Domain/users cannot access the display settings and have background A
Domain/power users can access the display settings and have background B

Hope this makes sense, thanks for any help!

 

[madmatt]

Create different OU's for different users.

Users
'-- Restricted Users
'-- Non-Restricted Users

Create different policies for each OU.

Apply the restricted policy to the restricted users OU.

 

[Ironvid]

Hi

thanks for that!

I understsand the OU's and how to create them; but I have no Idea on how to create new policy's and and apply them to each OU.

I am trawling through the help files, so any help on how to do this would be great!

thanks in advance!

 

[madmatt]

Download the Group Policy Management Console from Microsoft for easy management of policies.

http://www.microsoft.com/downloads/...24-8cbd-4b35-9272-dd3cbfc81887&DisplayLang=en

After creating the policy it is easy to assign it to an OU using this tool. You can also create backups using the above tool.

I'd also suggest purchasing the Microsoft Windows Group Policy Guide from Microsoft Press.

http://www.microsoft.com/MSPress/books/8763.aspx

 

[fitz]

you could also get all fancy and keep everyone in one OU if you need to and create seperate policies and set the security on each policy accordingly to apply to the appropriate security group.

 

[Ironvid]

Thanks

I already had the Group Policy Management Console but could not see how to create and apply the policy's.

I think I have got what I needed now!


Thanks All!

 

[Bootsy]

you could also get all fancy and keep everyone in one OU if you need to and create seperate policies and set the security on each policy accordingly to apply to the appropriate security group.

Thats basically what I do, I have all users in one OU (for each location) and set up different GPOs for them.

All you have to do is open up the Group Policy Manager and navigate to where said users are. Right click and "Create and link GPO here". Then right click and edit it the way you want to.