+ Post New Thread
Results 1 to 4 of 4
Windows Thread, Restricting GPO's in Technical; I'm feeling really thick at the moment because I know what I want to do should be possible and should ...
  1. #1
    Cache's Avatar
    Join Date
    Apr 2008
    Location
    Cumbria
    Posts
    1,283
    Thank Post
    477
    Thanked 188 Times in 182 Posts
    Blog Entries
    3
    Rep Power
    67

    Restricting GPO's

    I'm feeling really thick at the moment because I know what I want to do should be possible and should be dead easy to do, but maybe I'm getting confused.

    We have a policy set to restrict access to the C Drive which we want to remove for a group of 6 students when they use a group of machines for media so that they can caputre their work to the local drives.

    I thought I could do this by filtering the group policy security but I'm being thick about the way I'm doing it.

    At first I thought if I added the computer and Student groups to the policy and removed the authenticated users group then that should restrict it enough, but it allowed students access to the C drive on any machine, not just the one specified. Removing the student group and leaving the computer group then prevented the group policy from being applied. Removing the computer group and allowing the student group results in them being able to access the C drive on any machine again.

    Am I missing a trick on how to restrict it to a group of students on a group of machines or am I just trying to do the impossible?

    Thanks.

  2. #2
    Gibbo's Avatar
    Join Date
    Feb 2008
    Location
    Cheshire
    Posts
    927
    Thank Post
    211
    Thanked 347 Times in 240 Posts
    Rep Power
    93
    We partition the hard drives and give them access to the non-system partition.

  3. Thanks to Gibbo from:

    Cache (15th January 2011)

  4. #3

    Join Date
    Dec 2008
    Location
    Nottingham
    Posts
    575
    Thank Post
    38
    Thanked 115 Times in 105 Posts
    Rep Power
    47
    For ease (and to not over complicate your GPO permissions) I'd create a new OU with the machines in, a group for the 6 students, have the machines in the OU and apply a new policy to domain computers and the user group which specifies just that individual GP setting (and user loopback processing).

    Cheers

    Will

  5. Thanks to Willott from:

    Cache (15th January 2011)

  6. #4
    Cache's Avatar
    Join Date
    Apr 2008
    Location
    Cumbria
    Posts
    1,283
    Thank Post
    477
    Thanked 188 Times in 182 Posts
    Blog Entries
    3
    Rep Power
    67
    We need to use the OEM recovery partition on the HDD which messes things up a little with reagards to repartition the disk unfortunately, although hopefully the machines will get replaced this summer so that I can get a 2nd HDD fitted which will solve the problem for next year.

    Never gave loopback a thought and should solve the immediate problem, will check monday. Cheers Willott!



SHARE:
+ Post New Thread

Similar Threads

  1. Restricting Skype
    By sdc in forum General Chat
    Replies: 0
    Last Post: 13th December 2010, 01:17 PM
  2. Replies: 0
    Last Post: 6th July 2010, 09:45 PM
  3. Restricting MMC.
    By boomam in forum Windows
    Replies: 29
    Last Post: 10th January 2008, 08:30 PM
  4. Restricting Logons
    By Espada in forum Windows
    Replies: 2
    Last Post: 6th December 2007, 06:51 PM
  5. Restricting RIS
    By beast_gts in forum Windows
    Replies: 3
    Last Post: 28th June 2007, 10:26 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •