RM CC4 kinda loop back processing

[StephenHardy]

Hi there,

 

Just wondering if anyone has every achieved a different set of user policies for specific stations on a CC4 network?

 

Basically I am trying to create a number of offline student laptops where they users have their normal permissions on college stations, but on a group of stations they have access to the control panel and abilities to joint home wireless networks.

 

Loop back processing is not an option as in Cc4 land all stations sit in the same OU and GPOs are linked at the OU above so encompass users and stations alike... I've tried security filtering on stations and users as well as WMI with no success

 

thanks

 

Stephen

[clareq]

Can you make them privileged users?

[StephenHardy]

Yeah but these are kids... There has to be a more eloquent solution. At worst I can add them to a group with a policy filtered to it and they can access the required settings, but this will carry through onto all stations

[clareq]

Is it one machine per user? You could add the user or a security group to the local Network Configuration Operators group, which will allow them to add the machine to their home network, but I can't think of a way of opening control panel to a group of machines.

[StephenHardy]

We hide the system tray icons as standard so I would need to undo that as well in the GPO

[StephenHardy]

Sorted by Using Item-Level Targeting specific registry settings to the user config, but the Item-Level Targeting was done to a Security group containing the workstations.

 

So when a user logs into any other stations their settings are still locked down, but on these laptops for Offline use they get right click access/system tray access and Offline File sync access.

 

Happy Days

 

 

Stephen