Restrict applications with Group Policy

[Guest]

Does anyone know of any articles detailing how to restrict applications using
Group policy software restrictions and active directory user group? For
example I'd like to restrict user from running MS Project until I add them to
the MS Project group?

Many thanks in advance

 

[Vera Noest [MVP]]

This should help:

324036 - HOW TO: Use Software Restriction Policies in Windows
Server 2003
http://support.microsoft.com/?kbid=324036

Using Software Restriction Policies to Protect Against Unauthorized
Software
http://www.microsoft.com/technet/treeview/default.asp?
url=/technet/prodtechnol/winxppro/maintain/rstrplcy.asp

You can filter user policy settings based on membership in security
groups.
Note that is you want to restrict users only when they logon to the
Terminal Server, but not when they logon to their workstation, you
have to use the loopback processing setting in the GPO. This is
mentioned in KB 324036, but you might want to read these articles
as well:

260370 - How to Apply Group Policy Objects to Terminal Services
Servers
http://support.microsoft.com/?kbid=260370

231287 - Loopback Processing of Group Policy
http://support.microsoft.com/?kbid=231287

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
SQL troubleshooting: http://sql.veranoest.net
___ please respond in newsgroup, NOT by private email ___