Re: Restrictions on users?

From: Pancho_Villa (pvilla_at_michelena.org)
Date: 09/09/03 

Date: Tue, 9 Sep 2003 10:27:52 -0700

It sounds like you want to start using some security
policies. You can see all of the local policies on each
2000 or later machine by checking out the local security
policy under administrative tools.

To create domain wide policies (this is what you are
talking about) then you'd need to hop on one of your 2000
servers and create them there.

Refer to the following MS article, it is exactly the
opposite (allowing permissions) but from it you should be
able to see what to do.

http://support.microsoft.com/default.aspx?scid=kb;en-
us;320065

>-----Original Message-----
>Sorry I was not more clear about what I wanted to do. I
wanted a certain
>user account to have restrictions on not to install any
software, change IE
>settings, change background, screen saver and others.
This user account will
>be able to logon to any computer but can still carry
restrictions.
>
>
>"Dmitry Korolyov" <d__k@nospamformorons.mail.ru> wrote
in message
>news:%23e46AYudDHA.2432@TK2MSFTNGP10.phx.gbl...
>> If you want to make them able to login on several
computers, just create
>> user account.
>> If you want to restrict them to several computers, you
can do it in
>several
>> ways. First, by listing allowed computers in "Log on
to" property (found
>> under account tab). But this feature will only work if
NetBIOS is
>installed,
>> and is limited to 8 computers I believe.
>>
>> The other way is to configure security policies by
restrictin "log on
>> locally" privilege on a given computers to a certain
accounts only. This
>is
>> a bit more complicated (requires these computers to
have the same or
>similar
>> security policies applied, which is not always
possible), but more
>> reliable - will work without NetBIOS enabled and even
if that computer is
>> disconnected from the network (as long as the policy
applied).
>>
>> "Dooma" <Say-no-to-spam@hotmail.com> wrote in message
>> news:ud8NIotdDHA.1152@TK2MSFTNGP11.phx.gbl...
>> > I want to put restrictions on a certain user in my
active directory(like
>> > roaming profile in NT). The user will need to logon
to several
>computers
>> > using the same user name and password. I am new to
AD. Where do I start?
>> >
>> >
>>
>>
>
>
>.
>

Relevant Pages

  • Re: Filesharing Problems
    ... What security programs are running? ... Now any computer on the network can browse to any other computer on ... put all computers in the same Workgroup. ... Select a user account to automatically log on by ...
    (microsoft.public.windows.vista.networking_sharing)
  • Re: Need help closing security holes in my Windows XP home system!
    ... really, stop using the win xp user account with admin, that makes it ... Look you ignorant moron, I've been using computers for nearly 25 years, ... and not security issues, which goes against the entire world's opinion ... Admin rights, ...
    (comp.security.firewalls)
  • Re: Need help closing security holes in my Windows XP home system!
    ... > really, stop using the win xp user account with admin, that makes it ... > Look you ignorant moron, I've been using computers for nearly 25 years, ... So it's more than a little insulting when you write ... > and not security issues, which goes against the entire world's opinion ...
    (comp.security.firewalls)
  • Re: Allowing a domain user account (specify) to add workstation to Windows 2000 domain (SP4)
    ... Should I create Security Global group or Domainlocal Security? ... I see that I can create a domain user account, ... Create the gpo in the ou where the Computers reside, ... group (The same group as in the restricted group used above?). ...
    (microsoft.public.win2000.active_directory)
  • GPO Security settings not applied (SceCli error 1202 0x4b8)
    ... receiving policies, ... The Event Viewer Application Log on the affected computers, ... Security policies were propagated with warning. ... So I'm going to try recreate the security database (probably next week cause ...
    (microsoft.public.windows.group_policy)