lockdown GPO question

lockdown GPO question

Post by TW9ua2V » Sat, 14 Aug 2004 16:47:02


I want to lockdown a couple PCs, and as many different users use them, they
have many different log on accounts, so i will need to lock the PC down
itself.
If i create a OU, place the 2 PCs in here and modify the computer
configuration section of GPO, this will effect anyone logging onto the PC.

Problem i got is what happens if an administrator wants to log on and
perform tasks, the PC is still locked down.
is there a better way of doing this, ie) preventing any users apart from
admins, from doing things on the 2 PCs??
 
 
 

lockdown GPO question

Post by jabrand » Sun, 15 Aug 2004 08:59:28

Most of the settings that lock down users from performing tasks or
preventing them from using parts of the OS are in the user config of a
policy.
This is the same type of situation where you might have a TS available to
anyone but still want to limit all users. This were the loopback policy
comes into play.
It will apply user settings no matter who logs on.
This will explain better than I
231287 Loopback Processing of Group Policy
http://www.yqcomputer.com/

--
James Brandt [MSFT]