Group Policy Settings

  • Thread starter Thread starter Ahmed
  • Start date Start date
A

Ahmed

Hi

I'm looking for the GPO configurations, which will enforce the following
settings:

1. Disallow local software installs
2. Force specific app icons
3. Force the installation of specific printers
4. Add a group of users to local admin group

Is this possible through GPOs?
 
1. Disallow local software installs
Click to expand...

This is accomplished by appropriately setting file and registry permissions.
2. Force specific app icons
Click to expand...

You want certain shortcuts to be made available? Do you want users to be
able to delete them? Are these icons per-user or per-machine (or does it
matter)?

You could package the desired icons into an MSI and assign it to
machines/users. You can optionally have the MSI set permissions so that
users cannot delete the icons. You may also want to consider straight out
copying the desired icons to the All Users desktop/start menu.
3. Force the installation of specific printers
Click to expand...

You'll have to write a script to attach to the desired printers. This is
probably best done as a defined login script.
4. Add a group of users to local admin group
Click to expand...

This is what restricted groups are for -- a search of the MS Knowledge Base
for "restricted groups" will enlighten you on the topic. You could probably
start with KB228496.

\\ MadDHatteR
 
Thanks for your replies.

MadDHatter,

With regards to the icons, it doesn't really matter. I think I'll go with
the MSI idea, thanks!
 
Back
Top