Windows Vista Forums
Vista Forums Home Join Vista Forums Windows 7 Forum Vista Tutorials Tags
Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks.

Go Back   Vista Forums > Vista Forums > System Security

Vista - Set Group Policy different for each user group?

Reply
 
Old 07-11-2008   #1 (permalink)


Windows Vista™ Ultimate x64
 
 

Set Group Policy different for each user group?

Is it possible to set administrators to one GP and standard users to another? I want to disable Command Prompt, Task Mgr and lockout all USB and CD drives for standard users but allow administrators to access all of those.

How do i set different group polices depending on user?

Thanks in advance

My System SpecsSystem Spec
Old 07-11-2008   #2 (permalink)


Vista Ultimate 32bit
 
 

Re: Set Group Policy different for each user group?

Yep. As long as the policies you want to deploy to those groups are per-user (i.e. within the user configuration section of GP Editor), then you can use a tool like Microsoft's GPMC to "security filter" the effects of a GPO to a particular user group. Or, you might want to check out Desktop Policy Manager--www.sdmsoftware.com/desktop_management, which provides a simplified web interface into Group Policy and makes targeting by group much simpler (full disclosure--I work for this company).

Darren
My System SpecsSystem Spec
Old 07-12-2008   #3 (permalink)


Vista Ultimate 64bit
 
 

Re: Set Group Policy different for each user group?

That's exactly what GP is designed to do my friend, so just read thru the help files to find how to do what you want done.
Normal user groups shouldn't even have access to the GP interface so you don't really have one GP for Admin and one for Users. You simply set different permissions for the different user groups in the same GP editor.
You can use GP editor to allow or disallow just about anything, you just have to have a look around and read the Help files, it's all there somewhere.

Here's a link to where you can get a small tutorial on some of this - Understanding Group Policy basics for Windows Vista - and then there's a link there for some advanced help after that.

Good Luck!
My System SpecsSystem Spec
Reply

Thread Tools


Similar Threads
Thread Forum
Create user group in vista basic without the user and group manager window Vista security
add user to group /group scope - Global /Group type - Security PowerShell
Problems with Group Policy with restricted user account Vista networking & sharing
Force user account picture w/Group Policy Vista account administration
Group Policy Vista General


Vista Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46