Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss
Group Policy for Laptop Users
44 views
Skip to first unread message
Marcus K.
Oct 6, 2003, 1:31:04 PM10/6/03
to
I am trying to set up a group policy for the laptop users in my company. I want to be able to lock them out of the control panel mostly (which I have done), however, I would like to allow them the ability to install software. Does anyone have any tips on the best way to set this up. Thank.s
Scott Sanders
Oct 7, 2003, 9:23:41 AM10/7/03
to
They will be able to install most software if they are a member of the
local power users groups.
You can add domain groups to the local power users group by using
restricted groups.
Please note that power users do not exist on domain controllers so the
policy would have to be created or modified remotely using the adminpak
from a workstation.
local power users groups.
You can add domain groups to the local power users group by using
restricted groups.
Please note that power users do not exist on domain controllers so the
policy would have to be created or modified remotely using the adminpak
from a workstation.
228496 HOW TO: Use Restricted Groups in Windows 2000
http://support.microsoft.com/?id=228496
279301 Description of Group Policy Restricted Groups
http://support.microsoft.com/?id=279301
320045 HOW TO: Restrict Group Membership By Using Group Policy in Windows
2000
http://support.microsoft.com/?id=320045
M. Scott Sanders
MCSE, MCSA, MCP+I
Microsoft Enterprise Support
EPS Directory Services Team
Email: sco...@online.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no rights.
Marcus K.
Oct 7, 2003, 10:01:04 AM10/7/03
to
Where can I get the workstation adminpak to install it? Is it a download? Thanks for your help.
Marcus K.
Oct 7, 2003, 1:06:04 PM10/7/03
to
I'm a still a little confused by the process you are suggesting. I installed the adminpak on the laptop, however, i'm not sure how to move or import the Power Users group to the domain group policy. Any help would be appreciated.
Dave Shaw [MVP]
Oct 8, 2003, 4:21:54 PM10/8/03
to
Admin Pack (ADMINPAK.msi) comes in 2 versions - one for Windows 2000 and one
for Windows Server 2003. You can find them on their respective Server
Product CDs. In addition, once the server is installed, the Admin Pack is
placed in the System32 folder on the servers. You can install from there,
if you have permissions to that location.
for Windows Server 2003. You can find them on their respective Server
Product CDs. In addition, once the server is installed, the Admin Pack is
placed in the System32 folder on the servers. You can install from there,
if you have permissions to that location.
-ds
"Marcus K." <anon...@discussions.microsoft.com> wrote in message
news:9238EF3C-C40C-4A81...@microsoft.com...
Scott Sanders
Oct 13, 2003, 12:06:08 PM10/13/03
to
1. on the workstation with the adminpak installed open Active Directory
Users and Computers
2. Create a new OU or go to an existing OU where you want this policy to
apply.
3. Right click and go to properties and then go to the group policy tab
4. Create a new group policy, and open this policy to edit it.
5. Go to computer configuration\windows settings\security
settings\restricted groups
6. Add Power Users, you will have to hit browse and browse to the local
machine to find and add this group
7. Then add the domain groups to this power users group that you want to
be power users on the local machine
8. Close the policy
9. Place the machines in this OU that you want to get this policy
Users and Computers
2. Create a new OU or go to an existing OU where you want this policy to
apply.
3. Right click and go to properties and then go to the group policy tab
4. Create a new group policy, and open this policy to edit it.
5. Go to computer configuration\windows settings\security
settings\restricted groups
6. Add Power Users, you will have to hit browse and browse to the local
machine to find and add this group
7. Then add the domain groups to this power users group that you want to
be power users on the local machine
8. Close the policy
9. Place the machines in this OU that you want to get this policy
bsupr...@gmail.com
Sep 4, 2012, 11:37:38 AM9/4/12
to
The Galaxy S2 was recently announced as the manufacturer's best selling smartphone, and is fast becoming the handset of choice for those who are looking for an alternative to the iPhone 4S.
.http://latestmobileforyou.blogspot.in/
0 new messages