GPO in a workgroup environment

[Miha]

Hi



Is it possible to configure some kind of 'group policy' in a Win2003
Workgroup (not domain) environment? We have installed terminal server, so we
want to restrict access and settings to our local users that logs into
terminal server. Since this is no problem in a local domain environment
(through AD - group policy), I'm wondering if and how could this be done
also in a workgroup environment?

Thank you all in advance



Regards,

Miha

 

[Guest]

In a workgroup environment, you can also access the local policy using the
Group Policy Object Editor snapin in MMC. But this will be a tedious approach
as you need to repeat this process for each machine.

HTH.

 

[Miha]

Thanks for info.
Regards
Miha

In a workgroup environment, you can also access the local policy using the
Group Policy Object Editor snapin in MMC. But this will be a tedious
approach
as you need to repeat this process for each machine.

HTH.

 

[Jorge Silva]

Hi

In a workgroup environment, you can also access the local policy using the
Group Policy Object Editor snapin in MMC. But this will be a tedious
approach
as you need to repeat this process for each machine.

You can always use security and configuration analysis to configure the
model and impor it to each T.S Machine.

--
I hope that the information above helps you

Good Luck
Jorge Silva
MCSA
Systems Administrator

 

[Roger Abell [MVP]]

in short, no

Outside of a domain there is only the one local group policy, and any
settings
made in it will be applied to all accounts equally. I will not even mention
the
main documented work-around as it is far too painful, errorprone, and not
compatible with change.

 

[Steven L Umbach]

That would be great for computer configuration security settings seen in
Local Security Policy but would not help with any user configuration
settings. --- Steve

 

[Ragnar]

You still have the local Group Policy, type gpedit.msc in start menu run to
access it.

Remember that when using a local Group Policy you cannot filter like you do
with a domain GPO, however you could change file permissions (after you have
configured the local GPO) for the folder c:\windows\system32\group policy.

Good luck!

/Ragnar