Server 2003 GPO to allow and deny Win7 DVD by user

[b15101414944a]

Hello,

 

New to forum, we have Server 2003 with Win7 desktops. We need to restrict all desktop CD and DVD to all users except Domain Administrators, we do need to allow two staff access to one of the desktop CD and DVD. Is the best way to do this create two OU (One to allow and one to deny) and two GPO (one to allow and one to deny)?

 

Need a little help with adding desktops to allow and how to add staff to allow - Add staff to allowed desktop and add desktop to allowed OU?

 

Thanks

 

B

[MordyT]

Create on GPO to deny and link it in the user ou. Make a security group and add those 2 users, apply security filtering for that group, and you are set.