Applying policy to one particular group or person...

  • Thread starter Thread starter Nate Harel
  • Start date Start date
N

Nate Harel

Working on a Win2000 Server domain and am relatively newbie to the group
policy.

I set up a company with remote access via VPN/Terminal Server so that one
particular employee can work from home.

She dials in to the server (she is on WinXP Pro)to work on a Access DB that
is running on the server.

All is fine, however, when she goes to the "Setings->Control Panel" she can
see all the Admin Tools. So I went into the group policy for the local
machine and found the piece that allows me to turn off access to the control
panel or parts of it. When I turn off access to the Admin tools, she can't
see it anymore. That's great. HOWEVER, no one else can, including me as the
administrator.

So... I was wondering how to apply that particular policy (or any policy for
that matter) to either a particular person or group.

thanks

Nate
 
-----Original Message-----
Working on a Win2000 Server domain and am relatively newbie to the group
policy.

I set up a company with remote access via VPN/Terminal Server so that one
particular employee can work from home.

She dials in to the server (she is on WinXP Pro)to work on a Access DB that
is running on the server.

All is fine, however, when she goes to the "Setings-
Control Panel" she can
see all the Admin Tools. So I went into the group policy for the local
machine and found the piece that allows me to turn off access to the control
panel or parts of it. When I turn off access to the Admin tools, she can't
see it anymore. That's great. HOWEVER, no one else can, including me as the
administrator.

So... I was wondering how to apply that particular policy (or any policy for
that matter) to either a particular person or group.

thanks

Nate



.
Click to expand...
I have been trying to do this for a year and no luck yet.
 
Use Organizational Units. Create them...put in the users
associated with them...and apply group policy at THAT
level.
Click to expand...

You can also give/deny access to apply policies to specific users and groups
(and computers too), by setting access rights in the GPO's properties.
I used this trick to block an Office 2000 software distribution policy from
running on a computer which already had Office XP installed, because I
couldn't remove it from the OU it was in.

Massimo
 
Back
Top