General discussion


XP Group Only Computer Policies

By warren ·
How do you create Computer policies that only apply to one group? I need to put some strict restrictions on what a user can do, but I do not want to apply these restrictions to the Administrator.



This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

GPO Filtering

by BFilmFan In reply to XP Group Only Computer Po ...

Only allow the group to which the GPO will apply have permissions to read it.

Collapse -

Which file and/or folder

by warren In reply to GPO Filtering

Which file and/or folder am I suppose to set permissions on?

Collapse -


by haunted.hawk In reply to Which file and/or folder

Ok this needs some planning
The best way is that goto
the properties of each Folder that you want to restrict
Choose Properties by right clicking and choosing properties

Goto the Security Tab
and allow full access to the Administrators Group
Now if you see the "Users" Group there
Take which ever permissions you want to revoke from users and grant which ever Priviliges you feel like

If you want to apply it on the whole Drives then it would be really easy for you
All you have to do is to do the same steps for on the Drive Properties

Hope this'll Solve your Problem

Collapse -

Try the group policy management console

by systemsgod In reply to Which file and/or folder

You may need to first download it from MS. The Group Policy Management console is a great tool to create and link GPO's.

Once you open the GPO in the console, you can specify what groups get the policy in the security filtering section (scope tab). Additionally, you can then set deny access permissions for groups you dont want to get the policy (delegation tab and "advanced").

Be sure and test your policies on test groups before deploying them on a large scale, as some settings may have unintended consequences. A great resource for policies is the book "Group Policy, Profiles, and IntelliMirror for Windows 2003, Windows XP and Windows 2000" by Jeremy Moskowitz.

Related Discussions

Related Forums