Win2K Pro, WinNT4 Svr, and Policies

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

WHAT I HAVE:
A small domain (2 servers, 7 clients) - PDC & BDC are still WinNT 4.0 while clients are Win2K Professional. The clients run HMI (Rockwell) automation software and the plant Operators use a single domain account to log on to the client boxes.

WHAT I NEED:
To cut out their "fun" on these production machines. I need to allow the Operators' account to access only the Rockwell software applications (2) pertinent to their job, and run them as administrators...otherwise, the Rockwell services don't all function correctly. However, I need to block everything else out (i.e., games, CD-burning software, etc.).

I'm a bit confused about whether or not to use poledit.exe on the PDC, or to try and achieve this goal via group editing on the Win2K units, with the lone group member pointing back to the domain account. I'm not sure if poledit.exe gives me the ability to cut the specific programs from the start menu that I don't want to remain.
 
Hello I.R

Group Policy are not supported on NT4.0. Group Policy is a part of Active
Directory for central administration. However you can only use poledit.exe
to apply policies to Pre-Windows2000 clients. The only choise you have is to
edit the local policy on each machine you have

--

// Christoffer Andersson

J.R. said:
WHAT I HAVE:
A small domain (2 servers, 7 clients) - PDC & BDC are still WinNT 4.0
while clients are Win2K Professional. The clients run HMI (Rockwell)
automation software and the plant Operators use a single domain account to
log on to the client boxes.
WHAT I NEED:
To cut out their "fun" on these production machines. I need to allow the
Operators' account to access only the Rockwell software applications (2)
pertinent to their job, and run them as administrators...otherwise, the
Rockwell services don't all function correctly. However, I need to block
everything else out (i.e., games, CD-burning software, etc.).
I'm a bit confused about whether or not to use poledit.exe on the PDC, or
to try and achieve this goal via group editing on the Win2K units, with the
lone group member pointing back to the domain account. I'm not sure if
poledit.exe gives me the ability to cut the specific programs from the start
menu that I don't want to remain.
 
Back
Top