General discussion


Restriction Applications to Users-Help!

By grouchyy ·
My goal is to set up different groups with the System Policy Editor and assign Users to those groups.
I have created the groups I want. Some will not have access to things such as the Control Panel and all Windows applications some will have full access.
I have two questions. How do I attach the person to the right group. I have gone into the User Mngr Domain and looked at the Profile section and asks me to put in the Logon Script Path. What do I put in there?
I have tested the restrictions with my user profile and have disabled almost everything from the SPE. Now when I go and check the option that says "Run only Windows applications" and it asks me to assign the application that I want to give access to, i've type in the full path, for example "c:\Program Files...\winword.exe" and when I log on it does not let me open Word. I want to disable all windows applications and let them only use say MS Word.
I'm sure it is something simple that i'm missing. Can someone pleasehelp?

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

Restriction Applications to Users-Help!

by Gigelul In reply to Restriction Applications ...

Use user manager for domain and create two global groups: one for full access and other one for restricted access. Add and sort domain users in these two groups. In policy editor add these two groups (FullAccess and RestrictedAccess) and customize allowed application (open one group and in system\restrictions\run only allowed application\show - using add button you can make a list of allowed application). In future all you have to do is to maintain these two groups with User Manager for Domain (eventualy modify the lists of allowed applications). Also this policy must be save as NTconfig.pol in NETLOGON share of your PDC and BDC.

Collapse -

Restriction Applications to Users-Help!

by grouchyy In reply to Restriction Applications ...

Thank you for the help.

There is one more part that I still can't get to work. When I select "Run only windows applications" I type in the full path of the program and I am still restricted from opening it. Is there something else I need to add other than the application I want to run?

Related Discussions

Related Forums