Active Directory and Software Installation

[kpm]

HI All

I have 2000 network with single domain. I have restricted
my users from browsing the network, control panel using
the Group policies.

MOst of my workstations are 2000 Professional and XP Prof.

My company has bought a new software which runs from the
server. For the software to run on the User workstation
the user needs to have admin rights to that local machine.

IN that case I have take them out of the Group policy
because the group policy takes precedence over the client
settings.
Is there a way to stop users seeing the network computers
without applying group policy, even If i give them local
admin rights.
Thank you for the help

KPM

 

[Cary Shultz]

-----Original Message-----
HI All

I have 2000 network with single domain. I have restricted
my users from browsing the network, control panel using
the Group policies.

MOst of my workstations are 2000 Professional and XP Prof.

My company has bought a new software which runs from the
server. For the software to run on the User workstation
the user needs to have admin rights to that local machine.

IN that case I have take them out of the Group policy
because the group policy takes precedence over the client
settings.
Is there a way to stop users seeing the network computers
without applying group policy, even If i give them local
admin rights.
Thank you for the help

KPM
.

KPM,

HUH? Having to make the users a member of the Local
Adminsitrators group - while horrible application writing
and *terrible* network/system administration should not
necessarily preclude GPO. I am sorry, but I really do not
understand what you are getting at. Do you have a
Restricted Group policy as part of the GPO in question?

If you have restricted the users from browsing the network
then they just *might* have a problem getting to the
server share that contains the software that they need to
run...

Can you elaborate on your set up?

Also, GPO applies to ONLY WIN2000 and WINXP Pro systems.
For any WIN9x or WINNT computers you are stuck with
POLEDIT. But I am sure that you are aware of this as you
did mention that most of your machines are WIN2000 and
WINXP...

Cary