Group policy lock down

[zodiaczz]

Hello I am locking down a a few computers for a customer, they want is pretty locks. All they want the user to be able to do is go to all programs and see the list of OFFICE 2003 PRograms such as word, excel etc.

I have it pretty well locked down now, with everything practically gone, though I am unsure how to clean up the all program section just enough to only haev the office entries. I can hide the all programs completely, perhaps a way to copy the shortcuts directly to the all programs section?

Thoughts?

Thanks all

 

[FROGGYJ]

I would remove the all programs menu and simply put some shortcuts on the desktop. Being locked down I'd make sure to remove the right button click, the log off function to name a few. Good luck!

FROGGYJ
A+,N+,CST,CNCT,MCP

http://www.EdmontonSportRiderz.com

 

[Roadki11]

we do this with Start Menu folder redirection in GP. Create a folder, share it out with a security group created just for those users, drop the icons you want them to see into the folder and thats all they see. works great.

RoadKi11

 

[gmail2]

While the suggestions above are really good, wouldn't it be better to do this with permissions? An advanced user could probably still use My Computer or something to browse to the location of an executible you might not want them running. Or maybe look into setting up Software Restriction Policies - although these are PC PC, regardless of who lgs onto them, and I think maybe they're more to prevent malicious code execution - but they may still be of some interest

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx

Good Luck

Irish Poetry - Karen O'Connor
Get your Irish Poetry Published
Garten und Landschaftsbau

 

[NeonDemon]

I recommend removing their ability to access the all programs menu and drop the icons on their desktop (makes it easier to apply the same to all with folder redirection). We have a similar setup for our sec staff. when they login all they have is the ability to logoff and run office apps.

Good Luck!

 

[zodiaczz]

thanks all for the suggestions
The desktop icons idea I initially did but they didnt like it, they want the desktop clear, going to try the start menu redirect and see where taht takes me.

Thanks to all

 

[Stevehewitt]

Could always use mandatory profiles too! ;-)




Steve.

"They have the internet on computers now!" - Homer Simpson

 

[zodiaczz]

Yes I did the redirection works well.. manadatory yes we have thought about that but when it comes to profiles I have always had bad luck... good suggestion though

Thanks all