Security Policies: one group, multiple machines, but not whole domain

Security Policies: one group, multiple machines, but not whole domain

Post by Mike Burkinsha » Sun, 31 Dec 1899 09:00:00



I have a group of personnel who can only access certain machines and need to
run only two or three main programs.  I want to use the Policy Editor to set
up the system so there is no chance of them fiddling.

They all log onto their workstations as TR (no password) and then log into
the main program individually. The workstations are on full time with
personnel logging in and out of the program as they change shifts.

Now... I can set this up on one machine so that it is configured exactly as
I want. What I'd like to do is load this policy onto the server so that
whenever anyone logs on to one of these workstations as TR, the policy is
activated and the machine loads up as configured rather than as default
user.

I suspect this is something like a roaming profile but I'm not sure how to
set these up. Can someone help or point me to some further info?

Thanks

Mike

 
 
 

Security Policies: one group, multiple machines, but not whole domain

Post by John Wagenvoor » Sun, 31 Dec 1899 09:00:00


What are the clients Win95/98 or NT?

The Window Resource Kit is good place to start to learn how to set up system
policies.


Quote:> I have a group of personnel who can only access certain machines and need
to
> run only two or three main programs.  I want to use the Policy Editor to
set
> up the system so there is no chance of them fiddling.

> They all log onto their workstations as TR (no password) and then log into
> the main program individually. The workstations are on full time with
> personnel logging in and out of the program as they change shifts.

> Now... I can set this up on one machine so that it is configured exactly
as
> I want. What I'd like to do is load this policy onto the server so that
> whenever anyone logs on to one of these workstations as TR, the policy is
> activated and the machine loads up as configured rather than as default
> user.

> I suspect this is something like a roaming profile but I'm not sure how to
> set these up. Can someone help or point me to some further info?

> Thanks

> Mike


 
 
 

Security Policies: one group, multiple machines, but not whole domain

Post by Mike Burkinsha » Sun, 31 Dec 1899 09:00:00


All the clients are NT4, SP4


> What are the clients Win95/98 or NT?

> The Window Resource Kit is good place to start to learn how to set up
system
> policies.



> > I have a group of personnel who can only access certain machines and
need
> to
> > run only two or three main programs.  I want to use the Policy Editor to
> set
> > up the system so there is no chance of them fiddling.

> > They all log onto their workstations as TR (no password) and then log
into
> > the main program individually. The workstations are on full time with
> > personnel logging in and out of the program as they change shifts.

> > Now... I can set this up on one machine so that it is configured exactly
> as
> > I want. What I'd like to do is load this policy onto the server so that
> > whenever anyone logs on to one of these workstations as TR, the policy
is
> > activated and the machine loads up as configured rather than as default
> > user.

> > I suspect this is something like a roaming profile but I'm not sure how
to
> > set these up. Can someone help or point me to some further info?

> > Thanks

> > Mike

 
 
 

Security Policies: one group, multiple machines, but not whole domain

Post by Carlos Gran » Sun, 31 Dec 1899 09:00:00


Use your Server's System Policy Editor to set up a Policy for TR 'users'
(Edit -> Add User) so then can do whatever you want/need/etc.

Save it as Ntconfig.pol in the folder winnt\System32\Repl\Imports\Scripts

If you have BDCs, you should activate the Replication Service so that file
will be copied en the same folder on the BDCs.

Hope this helps... :)
--

Ing. Carlos Fernndez Gran.
Microsoft Certified Professional.
<http://www.crosswinds.net/argentina/~cgrane/>


Quote:>I have a group of personnel who can only access certain machines and need
to
>run only two or three main programs.  I want to use the Policy Editor to
set
>up the system so there is no chance of them fiddling.

>They all log onto their workstations as TR (no password) and then log into
>the main program individually. The workstations are on full time with
>personnel logging in and out of the program as they change shifts.

>Now... I can set this up on one machine so that it is configured exactly as
>I want. What I'd like to do is load this policy onto the server so that
>whenever anyone logs on to one of these workstations as TR, the policy is
>activated and the machine loads up as configured rather than as default
>user.

>I suspect this is something like a roaming profile but I'm not sure how to
>set these up. Can someone help or point me to some further info?

>Thanks

>Mike

 
 
 

Security Policies: one group, multiple machines, but not whole domain

Post by Chad Hoope » Sun, 31 Dec 1899 09:00:00


Am I right in saying that in User Manager for domains you can configure a
user to only be allowed to log on to certain workstations?!?
Just a thought!!!

Chad


Quote:> I have a group of personnel who can only access certain machines and need
to
> run only two or three main programs.  I want to use the Policy Editor to
set
> up the system so there is no chance of them fiddling.

> They all log onto their workstations as TR (no password) and then log into
> the main program individually. The workstations are on full time with
> personnel logging in and out of the program as they change shifts.

> Now... I can set this up on one machine so that it is configured exactly
as
> I want. What I'd like to do is load this policy onto the server so that
> whenever anyone logs on to one of these workstations as TR, the policy is
> activated and the machine loads up as configured rather than as default
> user.

> I suspect this is something like a roaming profile but I'm not sure how to
> set these up. Can someone help or point me to some further info?

> Thanks

> Mike

 
 
 

1. any software can backup whole whole system not only data??

i want to backup NT for my company, but NT backup utility can't backup
some running files and services. and also can't backup whole harddisk.
so, other user can't use the software that he can use it before. i
think reason is that NT utility can't backup all the things.
can anyone suggest me a software which can
1.backup by schedule,
2.can backup whole system, not only data
3.and can backup throught network???
Thanks a lot!

Sent via Deja.com http://www.deja.com/
Before you buy.

2. Interface statistics over WWW

3. Domain Controller for Group Policy not available

4. Borland C - linking an ASM ?

5. Backup the whole domain in one tape

6. IDE Bus Master Drivers

7. Multiple OS, one domain, one hostname

8. FR PVC management problem?... may be?

9. Adding group from one domain to a group in another

10. SMS 2.0 security rights with Multiple Master Domain and Primary site in each Domain

11. Group Policy - Security Option Updating

12. Domain group policy