StudioTwo
Thu Jul 07 06:05:22 CDT 2005
Hello,
Firstly, you shouldn't normally edit the Default Domain Policy. This will
cause problems later (if you want to undo your changes).
Also, you have already spotted that it affects everything.
Instead, Create a New organizational Unit within "Domain User and
Computers". Just try it as an experiment!
You can then create a New Group Policy within the Properties of the
Organizational Unit.
You can control most things from here (including the settings for microsoft
office)
Here is a good starting point:
http://www.smallbizserver.net/Default.aspx?PageContentID=27&tabid=145
You will have to be careful about "picking" on individual employees / users,
though.
Each machine should be configured to the requirements of each group of
users.
We have an "acceptable use policy" in place. It helps to clarify where
EVERYONE stands in relation to computer use.
HTH
Stephen
"webboy" <webuser@theweb.com> wrote in message
news:egnZWatgFHA.3436@tk2msftngp13.phx.gbl...
> Hi,
>
> Apart from setting the user up as a member of the users group on the
> workstation, what other lockdown mechanism can i use.
> I have a user who's husband is in our line of work but he keeps on telling
> her how to do this and that.
>
> What other methods are effective and not disruptive to the general
> operation.
>
> I've used the default policy in the domain but they affect the admins too.
>
> Such as :-
> Disabling task manager
> Disabling windows update
> Disabling regedit
> Disabling run
> Disabling the taskbar & start menu
>
> I've had to place the user as a member of the user group(workstation) due
> to
> their bad nature.
> I read about Organisation Units but I'm a bit stuck.
>
> I would love some feedback on how to go about this.
>
> Thank you
>
> webboy
>
>