- Posts: 47
- Thank you received: 0
Restricting users to use start menu options in 2003 domain
- ramachandraraju
- Topic Author
- Offline
- Junior Member
Less
More
15 years 10 months ago #28569
by ramachandraraju
Hi all,
We are running Windows Server 2003 Domain, with Windows XP SP2 Clients( around 35).
We have some users in a limited access group. they are limited only to Office, yahoo messenger,Firefox,internet explorer and adobe reader. I want to customize the start menu through group policy for entire domain.
Please tell me how to hide the remaining applications which are installed in the systems for other users who have right to use those softwares. But how do i customize the start menu so that only those programs are listed??
This has to be done for existing and also new users which will be added to this group in future.
Thank u...
We are running Windows Server 2003 Domain, with Windows XP SP2 Clients( around 35).
We have some users in a limited access group. they are limited only to Office, yahoo messenger,Firefox,internet explorer and adobe reader. I want to customize the start menu through group policy for entire domain.
Please tell me how to hide the remaining applications which are installed in the systems for other users who have right to use those softwares. But how do i customize the start menu so that only those programs are listed??
This has to be done for existing and also new users which will be added to this group in future.
Thank u...
15 years 10 months ago #28611
by Smurf
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
Replied by Smurf on topic Re: Restricting users to use start menu options in 2003 domain
Hi,
Create your customised Start Menu with the shortcuts you require from that group and put this on a network share somewhere. Then within group policy, for that group, point the Start Menu to the one created using its UNC path.
Create your customised Start Menu with the shortcuts you require from that group and put this on a network share somewhere. Then within group policy, for that group, point the Start Menu to the one created using its UNC path.
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
- ramachandraraju
- Topic Author
- Offline
- Junior Member
Less
More
- Posts: 47
- Thank you received: 0
15 years 10 months ago #28614
by ramachandraraju
Replied by ramachandraraju on topic Re: Restricting users to use start menu options in 2003 domain
Hi Smurf,
thanks for ur response. Can u explain me how do that? its very much helpful to me.
Thank u..
thanks for ur response. Can u explain me how do that? its very much helpful to me.
Thank u..
15 years 10 months ago #28641
by Smurf
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
Replied by Smurf on topic Re: Restricting users to use start menu options in 2003 domain
Blimey, if i can remember this as i don't do much Windows stuff these days. If anyone spots any mistakes then feel free to post an update
Create a folder on your network somewhere and share it. Set everyone to Full Control (or authenticated users) so you can configure seperate start menus for different groups.
So, if i have a server called DC1, i create a new folder on one of my NTFS drives called StartMenus and share it as StartMenus. If i have a group called Finance and want to create a folder, create a folder called financeMenu under this new folder i have created above;
e.g. f:\StartMenus\FinanceMenu
Now you can put your links and StartMenu's etc... into that folder.
Now, we need to edit Group Policy;
Open Group Policy (i would download the free Microsoft Group Policy Management Snap-In which is better then using the default tools)
Within your Finance OU, create a new group policy called StartMenu's or something (if you already have a group policy created in this group then you can edit that one.
No, within the group policy, you have User Configuration -> Windows Settings -> Folder Redirection, now Right Click on the Start Menu and click Properties. Change the Setting to "Basic - Redirect everyone's folder to the same location" and change the Target folder location to "Redirect to the following location" and for the path, enter the UNC path such as \\dc1\StartMenus\FinanceMenu
I think that should be it.
(there are loads of other tweaks you can do under "User Configuration -> Administrative Templates -> Start Menu and Taskbar".
Since this has been created in the FinanceOU, it will only happen to users within that OU.
Cheers
Create a folder on your network somewhere and share it. Set everyone to Full Control (or authenticated users) so you can configure seperate start menus for different groups.
So, if i have a server called DC1, i create a new folder on one of my NTFS drives called StartMenus and share it as StartMenus. If i have a group called Finance and want to create a folder, create a folder called financeMenu under this new folder i have created above;
e.g. f:\StartMenus\FinanceMenu
Now you can put your links and StartMenu's etc... into that folder.
Now, we need to edit Group Policy;
Open Group Policy (i would download the free Microsoft Group Policy Management Snap-In which is better then using the default tools)
Within your Finance OU, create a new group policy called StartMenu's or something (if you already have a group policy created in this group then you can edit that one.
No, within the group policy, you have User Configuration -> Windows Settings -> Folder Redirection, now Right Click on the Start Menu and click Properties. Change the Setting to "Basic - Redirect everyone's folder to the same location" and change the Target folder location to "Redirect to the following location" and for the path, enter the UNC path such as \\dc1\StartMenus\FinanceMenu
I think that should be it.
(there are loads of other tweaks you can do under "User Configuration -> Administrative Templates -> Start Menu and Taskbar".
Since this has been created in the FinanceOU, it will only happen to users within that OU.
Cheers
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
15 years 10 months ago #28652
by ksall
Replied by ksall on topic Re: Restricting users to use start menu options in 2003 domain
tnky
Time to create page: 0.138 seconds