How Can I Do That In Group P

[heskin35]

We have a group and I need a policy for this group.
1- This it can't connect to secret shares (c$,d$ etc.)
2- It isn't local admin
3- It can add or remove programs
4- It can add or remove printer.

This grup can or can't do this matters.
How can we set security settings this group? Thanks a lot.

 

[TechyMcSe2k]

You have to be an admin to add/remove programs locally. Push add/removes through GPO.

As far as printers, utilize a print server. Non-Admins can add network printers, just not local ones.

http://answers.microsoft.com/en-us/...al-admin/b21aa72b-5a7f-485d-999e-f844e7d4a550

You need to utilize GPO's for this level of control you are seeking. GPO's can auto install printers for users based on their OU. GPO's can add/remove programs, also based on OU or even the Group the user belongs to.

GPO's...learn them, love them!

http://technet.microsoft.com/en-us/windowsserver/bb310732

http://www.samtechconsulting.com

_______________________________________
Great knowledge can be obtained by mastering the Google algorithm.

 

[heskin35]

Thanks. I'll look. With my best regards.