Group Policy - How powerful is it really?

  • Thread starter Thread starter Stephen O'Sullivan
  • Start date Start date
S

Stephen O'Sullivan

G/day forum,

I've got a couple of things I want to ask in relation to what I can and
cannot do with Group Policy. So, here goes:

1. Can I disable the usage of USB drives?
2. Can I disable the usage of Floppy drives?
3. Can I control the network shares on my Workstations?
4. Can I control the local users on systems? Group membership, etc....

If any of ye guru's know the answer can ye let me know if its possible and
how I would go about doing it.

Regards,
Steve.
 
inline and below, I hope the information helps.

1 & 2 )

Hide these specified drives in My Computer

(User Configuration\Administrative Templates\Windows Components\Windows
Explorer)

http://msdn.microsoft.com/library/en-us/gp/239.asp

3 )

Scripts

a.. Scripts - Startup/Shutdown: Use this extension to specify the scripts
that run when you start and shut down the computer. This extension is
located under the Computer Configuration node. These scripts run on the
Local System account.
a.. Scripts - Logon/Logoff. Use this extension to specify the scripts that
run when a user logs on or logs off the computer. This extension is located
under the User Configuration node.

HOW TO: Assign Scripts:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;322241
Script Code Share a Folder

Const FILE_SHARE = 0
Const MAXIMUM_CONNECTIONS = 25
strComputer = "."
Set objWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
Set objNewShare = objWMIService.Get("Win32_Share")
errReturn = objNewShare.Create _
("C:\Finance", "FinanceShare", FILE_SHARE, _
MAXIMUM_CONNECTIONS, "Public share for the Finance group.")
Wscript.Echo errReturn

Microsoft TechNET Script Center if you working with scripts:
http://www.microsoft.com/technet/scriptcenter

4)

Restricted Groups
Computer Configuration\Windows Settings\Security Settings\Restricted Groups

Restricted groups allow an administrator to define two properties for
security-sensitive groups (that is, "restricted" groups).

The two properties are Members and Member Of. The Members list defines who
should and should not belong to the restricted group. The Member Of list
specifies which other groups the restricted group should belong to.

When a restricted Group Policy is enforced, any current member of a
restricted group that is not on the Members list is removed. Any user on the
Members list which is not currently a member of the restricted group is
added.

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/gp/611.asp?frame=true
--
Regards,

Christoffer Andersson
No email replies please - reply in the newsgroup
If the information was help full, you can let me know at:
http://www.itsystem.se/employers.asp?ID=1

Stephen O'Sullivan said:
G/day forum,

I've got a couple of things I want to ask in relation to what I can and
cannot do with Group Policy. So, here goes:

1. Can I disable the usage of USB drives? [Christoffer Andersson] yes, If
you know the assigned driver letter.
2. Can I disable the usage of Floppy drives? [Christoffer Andersson] Yes.
3. Can I control the network shares on my Workstations? [Christoffer
Andersson] Not sure what you mean with "Control" , You can handle much with
Group Policy and few lines of VB for manage worksation shares
4. Can I control the local users on systems? Group membership, etc.... [Christoffer Andersson] Yes

If any of ye guru's know the answer can ye let me know if its possible and
how I would go about doing it.

Regards,
Steve.
 
Back
Top