[THIN] Re: Procedure for restricting program access by users in terminal server 2003
- From: Jeff Pitsch <jepitsch@xxxxxxxxx>
- To: thin@xxxxxxxxxxxxx
- Date: Sat, 7 May 2005 21:31:29 -0400
Create another group policy for that group that allows the program. I
would do some reading into how group policy and SRP works before
implementing. Basic group policy knowledge is a must before
implementing any sort of group policy, throw on top of that SRP and
not having basic knowledge can be disasterous.
Jeff Pitsch
On 5/7/05, Kevin R. Fjelsted <kfjelsted@xxxxxxxxxxxxxx> wrote:
> Help!
> We created a disallow rule for a hash of a program and that disallows it
> for everyone.
> How then do we add another rule to allow it for a particular security
> group?
>
> We only see disallow and allow when we create the rule.
> -Kevin
>
>
> -----Original Message-----
> From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
> Behalf Of Edward VanDewars
> Sent: Saturday, May 07, 2005 1:31 PM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Re: Procedure for restricting program access by users in
> terminal server 2003
>
> Look at Software Restriction Policies:
> http://support.microsoft.com/default.aspx?scid=kb;en-us;324036
>
> SRP works at the OU level via a GPO but it will do what you want and I
> think it is awesome in "default deny" mode where you specify only what
> you want to run. Just be sure to test your rule set before deploying
> it.
>
> On 5/7/05, Kevin R. Fjelsted <kfjelsted@xxxxxxxxxxxxxx> wrote:
> >
> >
> > I am interested in documentation and other resources that will
> > describe procedures for restricting program access by user under
> windows 2003.
> > The scenario is that we have performed a lockdown under group policy
> > for the terminal server within a domain.
> > Now we have created security groups that various groupings of users
> > are then added as members.
> > We want to permit or deny access to installed programs based on
> > whether a particular user is a member of a particular security group.
> > Version of active directory is windows 2003 enhanced and we are
> > running terminal server 2003.
> > Please advise and post to the list for all to view.
> > Thanks.
> > -Kevin Fjelsted
> >
> ********************************************************
> This Weeks Sponsor: ThinPrint GmbH
> Now available: The new version .print Engine 6.2 with SSL encryption and
> certificate management.
> http://www.thinprint.com
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thin.net/links.cfm
> ThinWiki community - Excellent SBC Search Capabilities!
> http://www.thinwiki.com
> ***********************************************************
> For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode
> use the below link:
> http://thin.net/citrixlist.cfm
> ********************************************************
> This Weeks Sponsor: ThinPrint GmbH
> Now available: The new version .print Engine 6.2 with SSL encryption
> and certificate management.
> http://www.thinprint.com
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thin.net/links.cfm
> ThinWiki community - Excellent SBC Search Capabilities!
> http://www.thinwiki.com
> ***********************************************************
> For Archives, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:
> http://thin.net/citrixlist.cfm
>
********************************************************
This Weeks Sponsor: ThinPrint GmbH
Now available: The new version .print Engine 6.2 with SSL encryption
and certificate management.
http://www.thinprint.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
ThinWiki community - Excellent SBC Search Capabilities!
http://www.thinwiki.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
Other related posts:
