Computer Configuration vs User Configuration

[Guest]

Hi all,

Recently I am deploying GPO and I found User configuration offered more
lockdown function, my concern would be can i have all of the function that
listed in user config to be having in the computer configuration?

eg : the folder redirection is listed in user configuration but it is not
listed in computer configuration.

Kindly advice.

Thank you.

Best Regards,
JianMing

 

[Kevin Sullivan]

the concept of folder redirection for a computer doesn't make total sense.

If you want to make sure all users who log on to a specific computer get the
same folder redirection settings you can use loopback processing. There is a
brief explanation here (http://grouppolicy.editme.com/EnforceBlock) or here
(http://support.microsoft.com/?id=231287)...

good luck.

Kevin

 

[Guest]

HI Kevin,

Thanks for your reply.
In my environment, I would like to lockdown all of the user in customer
service dept where I redirect their desktop user to using icon from
application server.
The reason I choose computer config as customer service having very high
turnover rate of staff.

Any idea how to maintain in this kind of setup?

Thank you.

Best Regards,
JianMing

 

[Raghuramji]

Hi,

DesktopCentral has Common folder redirection Configuration as a
Computer Configuration. You can make use of that to get the result you
want.

Raghuramji C
www.desktopcentral.com
http://demo.desktopcentral.com
[ Remote Windows Desktop Management & Administration Software ]

 

[Kevin Sullivan]

Hi JianMing,

What are you trying to redirect? Just an 'icon' or an entire folder? Is it a
specific folder (My Documents, Pictures etc...)

Folder redirection works great for what it is intended to do, when you try
to use it to perform tasks that are out of its initial scope it can get
difficult.

It doesn't sound like there is a need for a third party soltuion here you
probably have everything you need out of the box. But as Raghuramji points
out there are solutions out there, the one he mentions, DesktopStandard
PolicyMaker, FullArmor (I think now NetIQ), Quest Group Policy Extensions...

If you choose to go with the third party route, take your time and evaluate.
These products are all very, very different and you wnat to know what goes
on under the covers (if you know what I mean)... evaluate, evaluate,
evaluate.

But like I said, you should be OK with Group Policy out of the box. It
sounds like you want to redirect their desktop, is that right? And what do
you mean by locakdown? That can be so many different things to different
people... Also, remember that you can use User Config and filter by Group so
you can handle the turnover rate... as long as the new user is in the target
OU you are good to go.

HTH,

Kevin

 

[Guest]

HI Kevin,

Thanks for your advise.
Yes, I would like to redirect the "icon". Everything has been done few
months ago include the grouping.

I have about 400 machines in my "call centre dept", which is using user
configuration and all of the users are in call centre OU.

I just would like to find a way, whereby instead of handling user
configuration lockdown, i can perform computer-based lockdown using computer
configuration to lower the administration time.

Idea is administrator do not want to add the user into the CallCentreGroup
and move the user to OU as there is too many users here.

Anyway, I am not going to user third party as i know i can perform in using
MS GPO.

Thank you so much.
JianMing