Domain Users
How to restrict domain users in windows 2003 server, from accessing CD/Floppy drive?
Hi All,
I have windows 2003 server. I want to restrict my domain users, from accessing the CD and floppy drive. What is the procedure to revoke this privilege from Domain users?
Thank you in advance
Vikram
Hi Vikram, I hope it will help you
Restrict Drives in My Computer:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
In right-side pane, create a new DWORD value NoViewOnDrive and change its value as following:
3 : To Restrict A and B drives only.
4 : To Restrict C drive only.
7 : To Restrict A, B, and C drives only.
8 : To Restrict D drive only.
F : To Restrict A, B, C, and D drives only.
03FFFFFF : To Restrict all drives.
And if you want more specific restrictions, like you want to restrict a combination of other drives, then you can use decimal no. instead of hexadecimal no. Following is a list for all drives decimal no.:
A: 1
B: 2
C: 4
D: 8
E: 16
F: 32
G: 64
H: 128
I: 256
J: 512
K: 1024
L: 2048
M: 4096
N: 8192
O: 16384
P: 32768
Q: 65536
R: 131072
S: 262144
T: 524288
U: 1048576
V: 2097152
W: 4194304
X: 8388608
Y: 16777216
Z: 33554432
ALL: 67108863
So if you want to disable a combination of drives, just sum their numbers and give the same value to NoViewOnDrive. e.g., for restricting C, D, E and F drives, give the value: 4+8+16+32 = 60
NOTE: You can also hide the drives using NoDrives DWORD value. The location and its value remain same as the above trick.
Viney
I want my domain users not to install any software by their own?
I want my domain users not to install any software by their own. i want to restrict my users from installing and modifing and removing softwares in their systems. If any body can help me please....... I am using windows 2003 as a server.
I feel so sorry for your users. It's obvious from your questions that you have no idea what you are doing. They need admin rights on their work PC's so that they can do their jobs... do not restrict their access.
How do I prevent domain users from attaching documents from a specific folder in their emails?
I asked a similar question last week and appreciate the answer I got. The users shouls be able to view and modify the documents but not email them out. Is there a way of doing this without having to deal with the exchange server?
You're basically being unreasonable in your requirements. Consider that if they're able to view and modify the documents, they can just *save* the document in some other folder - and then attach the document from the new folder. If you *insist* on filtering, it has to happen *after* the user has lost any control over the mail (in other words, you have to do it at your exchange server or network firewall or similar spot in your network that you control and the user doesn't.
Technological solutions to social problems rarely work. If your organization is sufficiently complicated that you have an AD set up so you *have* domain users, you should have some policy that allows you to say "These data files are covered by a Non-Disclosure Agreement. As a condition of continued employment, you promise not to disclose the data outside the company".
Or "You send these out, I'll stop by with a baseball bat and rearrange your office and face".
Depending what sort of company you have. ;)
How do I set up my domain to allow users to share documents across domains?
I currently have a setup with many computers in one zone. Out of all those computers, most of them are located in one large domain. We have a couple separate areas set up with their own little domains. Certain users have accounts in both domains, but when they try to access shared folders that are on the other domain that they aren't logged into they keep getting access denied. Is there anything I can do to allow them to access shared folders in the other domain without them having to log offf and switch to the other domain?
If you share it and let everyone see it, you should be able to get it if you know the entire hostname to get to the share.
Second option would be to set up an account for each user, on each computer so they can authenticate to it when they get to the share.
Last, get a server of some kind and have share folder there.
Good luck!
GPO to allow domain users to install software?
where can i find the Group policy that allow domain users to install software? by default nobody can install software.
How to Start Software Restriction Policies
For the Local Computer Only
1. Click Start, point to Programs, point to Administrative Tools, and then click Local Security Policy.
2. In the console tree, expand Security Settings, and then expand Software Restriction Policies.
For a Domain, a Site, or an Organizational Unit on a Member Server or a Workstation That Is Joined to a Domain
1. Open Microsoft Management Console (MMC). To do so, click Start, click Run, type mmc, and then click OK.
2. On the File menu, click Add/Remove Snap-in, and then click Add.
3. Click Group Policy Object Editor, and then click Add.
4. In Select Group Policy Object, click Browse.
5. In Browse for a Group Policy Object, either select a Group Policy object (GPO) in the appropriate domain, site, or organizational unit, and then click Finish.
Alternatively, you can create a new GPO, and then click Finish.
6. Click Close, and then click OK.
7. In the console tree, go to the following location:
Group Policy Object Computer_name Policy/Computer Configuration or User/Configuration/Windows Settings/Security Settings/Software Restriction Policies
How can I apply Folder Sharing feature for domain users?
I have a simple problem
I have DC by Windows 2003 and many of domain users
How can I apply Folder Sharing feature for domain users by group policy in the domain or by any way
enable file and print sharing, if on a LAN, computers group name needs to be same for all computers, and you can put files inside the shared folder and every one can access it, or set up a server and accounts with diffrent access rights to each individual.
How can I force domain users to log off after a certain idle period ? Is it possible ?
Thanks.
I did find a free windows tool. It is just a screen saver that you set, and it will force a log off after a set amount of time.
But setting it for 4-6 users profiles, for 3 computers will take longer than I want to....so ill try the gpo way
On some web programs, the admin panel has an option to allow you to set a length of time for a user account to be logged on, i don't know if that is what your asking. I don't think there is a way to actually set a kick off if people are logged on and just idol. Making them re-log in every time or once a week is do-able.
how to block domain users from using windows media player?
I'm configuring a Windows 2003 domain. I used group policy to configure User policy for an Organizational Unit. However, I can't find any policy object to block certain programs (like Windows Media Player) from runnning. This blocking would apply to WMP plugin for IE.
there is an option in the registry called RestrictRun, It will block any program that you dont specify as OK, however, if you dont include regedit.exe you'll be in trouble.. You can find info on it at www.regedit.com
I dont know if it would help with a plugin though..
What is a good router that controls specific domain access to specific users?
Right now I have a Linksys BEFW11S4 that I use with my cable internet. I'd like to be able to restrict only certain domains to specific users. With my current router I can only disable all activity. I'd like it to have wireless capabilities but that is not required. A few simple VPN options would also be nice for in the future. I don't think anything I can get at circuit city will do what I need and I am prepared to spend up to $400 on such a device. If anyone can provide some model numbers for me to look up and research I'd really appreciate it. Thanks.
Linksys RV082 (no wireless)
Cisco 871 (wireless)
Is there a way to see a complete list of users on your Google Apps Domain?
I want to see a complete list of the users on my google apps domain, even though I am not an administrator. Is that possible?
Hello
On this page you'll get
the requested information.
http://www.google.com/support/a/bin/answer.py?hl=en&answer=60058