Group Policy and Active Directory

[Bruce]

Hi,

I was hoping someone could help us solve a problem with Group Policy.

We have a Windows 2000 Domain, XP Pro clients.

We want to disable the display settings tab for all users with the
exception of a group of users and a group of computers.

I.e. All users should not a have the settings tab apart from;

a group of users who always get the tabe wherever they logon and
&
a group of computers which will always have the settings tab whoever
logs on

Can anyone suggestion a solution to the problem using Group Policy?

Thanks,

Bruce.

 

[Rob Elder MVP-Networking]

Display policies are user policies. Find them under user
configuration\adminstrative templates and create the policy. Next, create a
group for your users. On the security tab of the GPO add that group to the
list and select deny apply group policy.

 

[Bruce]

Hi Rob,

Thanks for this advice. To be honest I hadn't even't looked at the
Security Tab on GPOs before. Our Domain/AD is quite simple (not that
many OUs).

We have solved the user side of the problem by putting those users
that need the settings tab into a sub OU and set a GPO object on it to
override the domain GPO setting to hide the tab.

We also tried to do this for the room of PCs (setup a new sub OU and
put the PCs in it and setup a GPO on it to overide the "hide display
settings tab" set in the domain GPO).

However, it didn't work and the settings tab is disabled on them.

Maybe I should have not used the word Group because I think you
thought I meant network group (I was just using the word loosely).

Anyway, do you (or anyone) know how to solve the PCs side of the
problem? I.e. make it so the display settings tab is always on thsoe
PCs.

Thanks,

Bruce.