Group Police Question

[Guest]

Hi All,

I am working on a project for using Group Police to limit users to access
Internet by use IE, also, I don’t want users to download software from
Internet, install software from CD. And I don’t want them to change all
configurations on their client computers.

I am new on Group Police. Could anybody know how to do it? Thanks.

 

[Guest]

You can use the Software restriction policies to prevent installing or using
various softwares. It is found (if using the gpmc) in either Windows
settings\security settings\then software restriction policies. You can also
do it from the User configuration. There are 4 different ways to use the
software restriction policies
Hash rule (select a specific program to allow or disallow)
Path rule (has to be in a specific location to allow or disallow)
Certificate rule (you assign a pki certificate to an application to allow
usage)
Zone rule (you can prevent applications that run through IE).

If you are going to use the software restriction policies, I would create a
test group and test them out. Also remember if you use any of the rules that
prevent access to applications that have not yet been approved, you will need
to approve any and all Windows updates or updates to software applications
you use.

Hope that helps.

 

[Guest]

Thank you so much for your help.

--qq

You can use the Software restriction policies to prevent installing or using
various softwares. It is found (if using the gpmc) in either Windows
settings\security settings\then software restriction policies. You can also
do it from the User configuration. There are 4 different ways to use the
software restriction policies
Hash rule (select a specific program to allow or disallow)
Path rule (has to be in a specific location to allow or disallow)
Certificate rule (you assign a pki certificate to an application to allow
usage)
Zone rule (you can prevent applications that run through IE).

If you are going to use the software restriction policies, I would create a
test group and test them out. Also remember if you use any of the rules that
prevent access to applications that have not yet been approved, you will need
to approve any and all Windows updates or updates to software applications
you use.

Hope that helps.

 

[Florian Frommherz [MVP]]

Howdie!

I am working on a project for using Group Police to limit users to access
Internet by use IE,

You need to use a proxy to do that. People can easily circumvent the
proxy restrictions by using another browser---

also, I don’t want users to download software from

Internet, install software from CD. And I don’t want them to change all
configurations on their client computers.

Don't make them admin. You don't need Group Policy. Just make them
normal users - sounds kind of harsh but that's the only effective way of
handling issues of that nature.

cheers,

Florian

 

[kes]

Hi,

Can we write script (batch script or vbscript) for installing some
software located in some file server which can be reached through
client.After writing he script i want to link it to the GPO as logon script
The assumptions are client is in that domain ..