0 pts.
 Excluding Users From a Group Policy
I'm trying to create a policy to limit access to MSN Messenger by creating a "Don't run specified applications" policy (I realise this isn't 100% fool-proof, but it doesn't have to be), but there are some users which are allowed access to the program (these users are in their own security group). I read elsewhere that by creating the policy, and denying the MSN-allowed access to the registry.pol file, that this would restrict the policy to all other users. Unfortunately, doing this stopped ALL policys from working for the MSN-allowed users. Is there a way I can restrict MSN access to all except a few specified users? (As I've said above, it doesn't have to be fool-proof - just enough to act as a deterant and stop a regular user from figuring it out!) We are running a SBS 2003 Server, with XP/2000 Workstations.

Software/Hardware used:
ASKED: August 3, 2005  7:42 PM
UPDATED: August 4, 2005  4:49 AM

Answer Wiki:
If you go into the properties for the actual group policy itself and select the security tab, you can select the group that contains the users who are allowed to access MSN and clear the check box called Apply Group Policy under the Allow column. This will stop that policy being applied to users in that particular group as they will not have the relevant permissions.
Last Wiki Answer Submitted:  August 4, 2005  4:49 am  by  LeeJ75   0 pts.
All Answer Wiki Contributors:  LeeJ75   0 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _