Group Policy Settings

[Ahmed]

Hi

I'm looking for the GPO configurations, which will enforce the following
settings:

1. Disallow local software installs
2. Force specific app icons
3. Force the installation of specific printers
4. Add a group of users to local admin group

Is this possible through GPOs?

 

[MadDHatteR]

1. Disallow local software installs

This is accomplished by appropriately setting file and registry permissions.

2. Force specific app icons

You want certain shortcuts to be made available? Do you want users to be
able to delete them? Are these icons per-user or per-machine (or does it
matter)?

You could package the desired icons into an MSI and assign it to
machines/users. You can optionally have the MSI set permissions so that
users cannot delete the icons. You may also want to consider straight out
copying the desired icons to the All Users desktop/start menu.

3. Force the installation of specific printers

You'll have to write a script to attach to the desired printers. This is
probably best done as a defined login script.

4. Add a group of users to local admin group

This is what restricted groups are for -- a search of the MS Knowledge Base
for "restricted groups" will enlighten you on the topic. You could probably
start with KB228496.

\\ MadDHatteR

 

[Ahmed]

Thanks for your replies.

MadDHatter,

With regards to the icons, it doesn't really matter. I think I'll go with
the MSI idea, thanks!