Comments on: Acrive Directory Users and Computers

By: fork92

fork92 — Wed, 21 Jul 2010 16:11:13 +0000

To lock down the machines, use GPOs on machine configuration settings to avoid having USB drives being connected and other machine drivers from being altered. User configuration settings will block the individual users from customizing machines. Just make sure that if you do something like lock IE from enabling users to change the homepage, etc. that you do it in ALL setting areas (IE.exe, IE icon desktop, IE icon on taskbar). Try this on your test account first to make sure that you get the settings you want then, add this to the domain, OU settings so it’ll take effect for all users and machines. GPOs are both fun and frustrating. Good luck!

By: mrdenny

mrdenny — Mon, 14 Sep 2009 16:20:34 +0000

Folder redirection is configured via a GPO and tells the client machines to redirect the specified folders to a network share. For example you can redirect the MyDocuments folder to a networks share so that when something is saved to the MyDocuments folder it actually is saved to the server instead.

If you are getting errors using roaming profiles you should address that issues before trying any other configurations.

By: yankusbobicus

yankusbobicus — Sat, 12 Sep 2009 00:09:35 +0000

OK, I have never used folder redirection before. How does it work and how do I use it? And where do I find the roaming profiles? I have over 200 users and when they log in they get a message that their roaming profile can’t be found.

Thanks!!