How do I deny rights to outside users accessing our network?
I’ve just recently started a new job in a company with an existing 2K3 AD setup. The company started small, and has grown rapidly. During the earlier stages, security and ACLs were fairly relaxed, with the default fairly “wide-open” browse access to drives, folders etc. for Domain Users left as is, as users were all [...]
Answer Question
| March 18, 2008 7:17 PM
Active Directory, Active Directory security, Group Policy, Scripts
I’ve just recently started a new job in a company with an existing 2K3 AD setup. The company started small, and has grown rapidly. During the earlier stages, security and ACLs were fairly relaxed, with the default fairly “wide-open” browse access to drives, folders etc. for Domain Users left as is, as users were all [...]
Answer Question
| March 18, 2008 7:17 PM
Active Directory, Active Directory security, Group Policy, Scripts
How can I prevent a user from installing unwanted software?
How can I restrict a user from installing any software by making a Group Policy on domain server?
Answer Question
| February 29, 2008 3:59 PM
Group Policy, Windows Security
How can I restrict a user from installing any software by making a Group Policy on domain server?
Answer Question
| February 29, 2008 3:59 PM
Group Policy, Windows Security
GPO linked to site
I have a question about gpo’s I cannot find in my book. when a gpo is applied to a domain, it does NOT filter down to its child domains. it must be applied to the child domains also. my question is about gpo’s applied to sites. does a gpo applied to a site filter down [...]
Answer Question
| February 22, 2008 9:30 PM
Active Directory, GPO, Group Policy
I have a question about gpo’s I cannot find in my book. when a gpo is applied to a domain, it does NOT filter down to its child domains. it must be applied to the child domains also. my question is about gpo’s applied to sites. does a gpo applied to a site filter down [...]
Answer Question
| February 22, 2008 9:30 PM
Active Directory, GPO, Group Policy
computer based and user based policy implemented together?
computer based and user based policy implemented together? I am setting up a squid proxy server. To deploy it I want to setup computers such that I can have any user log into a particular workstation and have limited access but when he connects to another workstation(that does not have any group policy on), he [...]
Answer Question
| February 22, 2008 7:39 PM
Group Policy, Internet Explorer, Proxy, User authentication
computer based and user based policy implemented together? I am setting up a squid proxy server. To deploy it I want to setup computers such that I can have any user log into a particular workstation and have limited access but when he connects to another workstation(that does not have any group policy on), he [...]
Answer Question
| February 22, 2008 7:39 PM
Group Policy, Internet Explorer, Proxy, User authentication
Removing Pinball, Hearts, Minesweep etc from multiple workstations
I have 200 plus Dell pc’s hooked up to a network that I need to remove the microsoft games freecell, Minesweep etc. How can I do this without going to each machine and removing the games? Can I create a startup batch file to do this? Thanks.
Answer Question
| March 5, 2008 4:02 PM
Active Directory, Desktop management, Group Policy, Workstations
I have 200 plus Dell pc’s hooked up to a network that I need to remove the microsoft games freecell, Minesweep etc. How can I do this without going to each machine and removing the games? Can I create a startup batch file to do this? Thanks.
Answer Question
| March 5, 2008 4:02 PM
Active Directory, Desktop management, Group Policy, Workstations
Vista Group Policy Problem
I have a group policy that allows the user to enable or disable their lan connection. This policy works fine on an XP machine. On a Vista machine, if I try to disable the lan connection, I get UAC popup asking for the administrator username and password. I have turned off the UAC and it [...]
Answer Question
| February 14, 2008 4:30 PM
Group Policy, Vista
I have a group policy that allows the user to enable or disable their lan connection. This policy works fine on an XP machine. On a Vista machine, if I try to disable the lan connection, I get UAC popup asking for the administrator username and password. I have turned off the UAC and it [...]
Answer Question
| February 14, 2008 4:30 PM
Group Policy, Vista
Group Policy Permissios
I have a situation where I need to deny certain GPO’s from being linked to OU’s where delegation has been granted to Link GPO’s I have tried many security settings on the GPO itself but I have no luck.
Answer Question
| February 9, 2008 8:43 PM
Active Directory, delegation, Group Policy, Group Policy management
I have a situation where I need to deny certain GPO’s from being linked to OU’s where delegation has been granted to Link GPO’s I have tried many security settings on the GPO itself but I have no luck.
Answer Question
| February 9, 2008 8:43 PM
Active Directory, delegation, Group Policy, Group Policy management
How To Restict Messenger.exe
Dear All, How we can use Software Restiction Policy in Group Policy Feature to restrict Some Software in the Network. For Example i want that only Network Administrator can use Net send command in the network to send message to other computer in the network and no other user use this command etc. How we [...]
Answer Question
| March 4, 2008 10:35 AM
Group Policy, Network, Network administration
Dear All, How we can use Software Restiction Policy in Group Policy Feature to restrict Some Software in the Network. For Example i want that only Network Administrator can use Net send command in the network to send message to other computer in the network and no other user use this command etc. How we [...]
Answer Question
| March 4, 2008 10:35 AM
Group Policy, Network, Network administration
Changing Local Password using GPO
I administered 100 computers and i want to change the local administator password for all computers using GPO and im using windows server 2003 R2 standard edition..please help if anyone knows how to do it..thanks in advance..
Answer Question
| January 28, 2008 10:50 AM
Group Policy, LAN, Windows Server 2003
I administered 100 computers and i want to change the local administator password for all computers using GPO and im using windows server 2003 R2 standard edition..please help if anyone knows how to do it..thanks in advance..
Answer Question
| January 28, 2008 10:50 AM
Group Policy, LAN, Windows Server 2003
Applying a group policy security template with secedit
Thanks to Darren Mar-Elia, I was able to figure out how to create a security template for my computer’s group policy settings with the MMC. It’s a pretty simple template, only three items: Unicode] Unicode=yes [Version] signature=”$CHICAGO$” Revision=1 [System Access] EnableGuestAccount = 1 [Registry Values] MACHINESystemCurrentControlSetControlLsaEveryoneIncludesAnonymous=4,1 [Privilege Rights] SeDenyNetworkLogonRight = I would like to apply [...]
Answer Question
| January 18, 2008 6:09 PM
Group Policy, Microsoft Management Console, MMC, Security Templates
Thanks to Darren Mar-Elia, I was able to figure out how to create a security template for my computer’s group policy settings with the MMC. It’s a pretty simple template, only three items: Unicode] Unicode=yes [Version] signature=”$CHICAGO$” Revision=1 [System Access] EnableGuestAccount = 1 [Registry Values] MACHINESystemCurrentControlSetControlLsaEveryoneIncludesAnonymous=4,1 [Privilege Rights] SeDenyNetworkLogonRight = I would like to apply [...]
Answer Question
| January 18, 2008 6:09 PM
Group Policy, Microsoft Management Console, MMC, Security Templates
group policy automated setup
My software requires the configuration of a certain group policy setting. This setting can be found within gpedit.msc at “Local Computer PolicyComputer ConfigurationWindows SettingsSecurity SettingsLocal PoliciesUser Rights Assignment”, and is called “Deny access to this computer from the network”. I am looking for an automated way to configure this setting, but haven’t had much luck. [...]
Answer Question
| January 15, 2008 7:29 PM
Group Policy
My software requires the configuration of a certain group policy setting. This setting can be found within gpedit.msc at “Local Computer PolicyComputer ConfigurationWindows SettingsSecurity SettingsLocal PoliciesUser Rights Assignment”, and is called “Deny access to this computer from the network”. I am looking for an automated way to configure this setting, but haven’t had much luck. [...]
Answer Question
| January 15, 2008 7:29 PM
Group Policy
How to check which user delete a file that is place on network drive
I am using Windows 2003 domain server and in Active Directory, I have made organizational unit of different departments. I also enable auditing features in Windows 2003. Now my question is where I can check which user access which file on the network drives? When I saw it in even viewers of Domain controller, I [...]
Answer Question
| April 18, 2013 7:54 AM
Group Policy, Network security, Windows Server 2003
I am using Windows 2003 domain server and in Active Directory, I have made organizational unit of different departments. I also enable auditing features in Windows 2003. Now my question is where I can check which user access which file on the network drives? When I saw it in even viewers of Domain controller, I [...]
Answer Question
| April 18, 2013 7:54 AM
Group Policy, Network security, Windows Server 2003
Microsoft Enterprise Certificate Authority
My company has an Enterprise Certification Authority running on a domain controller. The Enterprise CA was installed to deploy computer certificates to be used for authentication with a wireless system. In the Certification Authority snap-in, next to the “computer” certificate template in the POLICY folder, the intended purpose is listed as “client authentication, server authentication.” [...]
Answer Question
| January 29, 2008 9:54 PM
Certificate authorities, Group Policy, Security
My company has an Enterprise Certification Authority running on a domain controller. The Enterprise CA was installed to deploy computer certificates to be used for authentication with a wireless system. In the Certification Authority snap-in, next to the “computer” certificate template in the POLICY folder, the intended purpose is listed as “client authentication, server authentication.” [...]
Answer Question
| January 29, 2008 9:54 PM
Certificate authorities, Group Policy, Security
How to block access to USB drives using Active Directory?
Question: We have a 100-users network running Windows Server 2003. I would like to use Active Directory to block all USB drive access permissions for a specific group of users. Would someone please explain how to define the group policy for this? Thanks.
Answer Question
| December 10, 2007 5:20 PM
Active Directory, Group Policy, Windows Server 2003
Question: We have a 100-users network running Windows Server 2003. I would like to use Active Directory to block all USB drive access permissions for a specific group of users. Would someone please explain how to define the group policy for this? Thanks.
Answer Question
| December 10, 2007 5:20 PM
Active Directory, Group Policy, Windows Server 2003
Recurring drive mappings
Has anyone see a correlation between Group policy settings and an issue with recurring drive mappings?
Answer Question
| December 8, 2007 5:03 PM
Group Policy, Windows Server 2003, Windows XP
Has anyone see a correlation between Group policy settings and an issue with recurring drive mappings?
Answer Question
| December 8, 2007 5:03 PM
Group Policy, Windows Server 2003, Windows XP
locked out admin – Group Policy Common Scenarios Using GPMC
Hi. New to AD. Was looking for an easy way to implement group policy over a small LAN. Came across this (http://www.microsoft.com/downloads/details.aspx?familyid=354b9f45-8aa6-4775-9208-c681a7043292&displaylang=en) from MS. Imported the policies fine and applied to test OUs. I wasn’t able to see the policies taking effect. Searched web and did as much troubleshooting as I could to no avail. [...]
Answer Question
| February 19, 2008 10:17 PM
Active Directory, GPMC, Group Policy
Hi. New to AD. Was looking for an easy way to implement group policy over a small LAN. Came across this (http://www.microsoft.com/downloads/details.aspx?familyid=354b9f45-8aa6-4775-9208-c681a7043292&displaylang=en) from MS. Imported the policies fine and applied to test OUs. I wasn’t able to see the policies taking effect. Searched web and did as much troubleshooting as I could to no avail. [...]
Answer Question
| February 19, 2008 10:17 PM
Active Directory, GPMC, Group Policy
I need your input
Howdy folks, I have the following set up: 2 Domain Controllers – Win2k3 Standard 1 member server with Exchange 2003 Standard 100 XP Pro workstations T1 connection Currently I use a sonicwall Pro 200 firewall, Symantec Corporate edition 10 AntiVirus, and Symanted Mail Security for Exchange. Everything works fine. I need to be able to [...]
Answer Question
| September 12, 2008 2:49 PM
Access control, Group Policy, Internet access, ISA Server, ISA Server 2006, User Permissions
Howdy folks, I have the following set up: 2 Domain Controllers – Win2k3 Standard 1 member server with Exchange 2003 Standard 100 XP Pro workstations T1 connection Currently I use a sonicwall Pro 200 firewall, Symantec Corporate edition 10 AntiVirus, and Symanted Mail Security for Exchange. Everything works fine. I need to be able to [...]
Answer Question
| September 12, 2008 2:49 PM
Access control, Group Policy, Internet access, ISA Server, ISA Server 2006, User Permissions
Configuring Outlook 2003 For users Through Group Policy
Hello, I have a group of about 120+ users who sometimes jump desks. I need to be able to automatically configure the Outlook 2003 profile for each user that logs onto a computer, without doing it manually each time. Thank you! Edward Benson
Answer Question
| February 5, 2009 2:38 PM
Group Policy, Outlook, Outlook 2003, Outlook Configuration
Hello, I have a group of about 120+ users who sometimes jump desks. I need to be able to automatically configure the Outlook 2003 profile for each user that logs onto a computer, without doing it manually each time. Thank you! Edward Benson
Answer Question
| February 5, 2009 2:38 PM
Group Policy, Outlook, Outlook 2003, Outlook Configuration
