Re: Active Directory Question

From: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] (sbradcpa_at_pacbell.net)
Date: 01/12/04

  • Next message: Tomasz Onyszko: "Re: Active Directory Question"
    Date: Mon, 12 Jan 2004 09:08:39 -0800
    To: Tomasz Onyszko <t.onyszko@w2k.pl>
    
    

    Why not just set them up as plain "users" and thus they can't install
    programs anyway?

    Susan

    Tomasz Onyszko wrote:

    >Simon Taplin wrote:
    >
    >
    >
    >>Is is possible to setup a policy on Win2000 Active Directory whereby you can
    >>use wildcards to deny users access to running certain programs, for example
    >>blocking userss running setup*.*
    >>
    >>
    >
    >No, it is not possible, but You can always use command line tools with
    >asterisk to set appropriate ACL's on this files :), or list this files and
    >create GPO entries with ACL in some semi automated way.
    >
    >
    >
    >

    -- 
    http://www.sbslinks.com/really.htm
    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------
    

  • Next message: Tomasz Onyszko: "Re: Active Directory Question"

    Relevant Pages

    • Re: Published application - what rights does the user need
      ... I have tried to change the entire setup since the last ... I am missing something on permissions and the ... Apply Group Policy ... particular computer account and user account have Full control ...
      (microsoft.public.windows.server.active_directory)
    • Re: Rant about installer features (Re: Progeny)
      ... MD Raid is tough for a bootable setup with automated tools. ... way to setup the "Ultimate" Linux Distribution... ... Debian really works. ... Policy, Policy, Policy. ...
      (Debian-User)
    • Re: AD GPOs, machine accounts and Desktop/Start menu icons
      ... a new Group Policy Object to it. ... Once this is setup, when a PC is logged in, it will automatically setup any ... folders assigned to machine accounts, which are magically viewable by the ... shortcut off a share or something. ...
      (microsoft.public.windows.server.active_directory)
    • Cannot add domain user into admin group for local computers
      ... SP1 and client computers some with Windows 2000 Pro SP4 and Windows XP ... the server by replacing a 20 GB HDD with a 80 GB HDD. ... Under group policy ... after the Win 2K3 server was setup - it was in the default mode that is ...
      (microsoft.public.win2000.group_policy)
    • Sysprep 2.0 Local Group and Local Group Policy
      ... this group doesn't give rights to the same location though. ... > Ok I have setup a group policy for the machine following article Q274478. ... > I sysprep the machine using sysprep 2.0, minisetup, pnp. ...
      (microsoft.public.windowsxp.security_admin)