Restricting users to access some resources

[Teguh]

Ok, here it is. Recently I set up a domain using W2K Server and all the workstations are using W2K Pro. This domain has 1 user as Administrator and the other 20 users as Domain Users.
Now I want to restrict all users except Administrator to access some resources from their workstation. These are resoruces that I want to restrict :
1. Control Panel
2. Disable right click on My Computer and My Network Places
3. Disable Display Properties (right click on desktop)
4. Disable Run... command from Start menu

Can somebody tell me how to do this? Thanks

 

[dankelt]

There are basically two things you need to do.
1. Create a Group Policy to restrict access.
2. Apply the Group Policy to only the Domain Users.

There are a couple ways you can do this. You could place all your users into a new container, and create a group policy for that container, or you could create a group policy for the entire domain, and give only Domain Users "Apply Group Policy" Permissions.

To Edit/Create a new G.P. go into Acitve Directory Users and computers, right click on your domain, or container that houses your users, click Properties. Then choose the Group Policy tab, then you can either create a new group policy or edit the existing one. Once you click edit, you will find most of what you are looking for under "User Configuration\Administrative Templates"

Dan

 

[Teguh]

Thanks Dan, I will try it on Monday