madurham Posted June 6, 2013 Posted June 6, 2013 We've done the logical thing and set up our groups on a classroom basis. Could anyone tell me how you allow teachers to only see the group for the classroom they are currently in? I've had a play and a quick research but I haven't found any instructions. I tried setting the Access Rights for a security group of PCs but it still shows all groups regardless of who logs in. We'd also like Administrators to still access everything from everywhere.
Boredguy Posted June 6, 2013 Posted June 6, 2013 We set it so only specific workstations can see that classroom, so staff have to enter the password when they load up the console. Also means if someone logs onto any other computer within the room the console does not show them anything. For us in IT Support, we set our AD group to have full rights though
madurham Posted June 6, 2013 Author Posted June 6, 2013 We set it so only specific workstations can see that classroom, so staff have to enter the password when they load up the console. Also means if someone logs onto any other computer within the room the console does not show them anything. For us in IT Support, we set our AD group to have full rights though I tried this, unfortunately they can still see all the other classrooms. We've set it up with a Staff AD group restricting console access e.g. preventing access to command prompt, and another for Domain Admins with full access, both work fine. Is there a priority/inheritance to the access groups? Is the settings for Staff AD group getting priority over the settings for the computers?
russdev Posted June 6, 2013 Posted June 6, 2013 I tried this, unfortunately they can still see all the other classrooms. We've set it up with a Staff AD group restricting console access e.g. preventing access to command prompt, and another for Domain Admins with full access, both work fine. Is there a priority/inheritance to the access groups? Is the settings for Staff AD group getting priority over the settings for the computers? Hi Yes the AD group it would overwrite the computers group in. So if in console access rights machine b you have GroupA hidden but staffADgroup had it shown. You would see it. If Pm your details more than happy to get a support tech to call and remote in and help you set things up. Russell Russell
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now