The GPTalk Mailing List

The GPTALK mailing list is where you can send and receive email related to Windows Group Policy. You must subscribe to the list to send and receive mail from the list. The purpose of the list is to provide a forum for asking and answering technical questions related to Group Policy. Any question is fair game as long as it is related to Windows Group Policy. The Archives for this list can be found on this page.

List Posts

Unanswered Active Topics

Forums Search

Forums >GPTalk >GPTalk Mailing List

Subject: [gptalk] Settings when using security filtering

Prev Next

You are not authorized to post a reply.

Author

Messages

tazamal_hussain User is Offline

Posts:5

01/28/2010 7:07 PM
Hi All, I have a very quick question. If I have 2 GPO's linked to an OU and one is security filtered to admin users and one is security filtered to the default Authenticated Users (so I assume this would include the admin users as well) what would if I set a setting on the admin users filtered GPO and the same setting was not configured in the authenticated users filtered GPO? So to put an example to this...If I want to allow all users to view context menus on the start menu (so they can create shortcuts to desktop etc etc)I need not set anything in the Authenticated Users filtered GPO. Just leave the setting to not configured. But admins on the other hand, have the ability to delete start menu items etc (therefore if they delete something that is supposed to be available to everyone as they want customise their start menus that shortcut disappears for everyone)...so I create a GPO and filter it to admins and disable the fact they can view context menus on the start menu.... Now, we have 2 possible settings that will apply to admins (disabled and not configured)...which one will get set? Lastly...is their any easier way to achieve what I am trying to do? I want to stop admins from dragging icons totheir desktop from the start menu or deleteing icons that affect all users in terminal server sessions. I would like admins to have the ability to create shortcuts to desktop though, as the policy I currently applied doesnt allow them to do that... Thanks _________________________________________________________________ Send us your Hotmail stories and be featured in our newsletter http://clk.atdmt.com/UKM/go/195013117/direct/01/

tazamal_hussain User is Offline

Posts:5

01/28/2010 7:07 PM
Hi All, I have a very quick question. If I have 2 GPO's linked to an OU and one is security filtered to admin users and one is security filtered to the default Authenticated Users (so I assume this would include the admin users as well) what would if I set a setting on the admin users filtered GPO and the same setting was not configured in the authenticated users filtered GPO? So to put an example to this...If I want to allow all users to view context menus on the start menu (so they can create shortcuts to desktop etc etc)I need not set anything in the Authenticated Users filtered GPO. Just leave the setting to not configured. But admins on the other hand, have the ability to delete start menu items etc (therefore if they delete something that is supposed to be available to everyone as they want customise their start menus that shortcut disappears for everyone)...so I create a GPO and filter it to admins and disable the fact they can view context menus on the start menu.... Now, we have 2 possible settings that will apply to admins (disabled and not configured)...which one will get set? Lastly...is their any easier way to achieve what I am trying to do? I want to stop admins from dragging icons totheir desktop from the start menu or deleteing icons that affect all users in terminal server sessions. I would like admins to have the ability to create shortcuts to desktop though, as the policy I currently applied doesnt allow them to do that... Thanks _________________________________________________________________ Send us your Hotmail stories and be featured in our newsletter http://clk.atdmt.com/UKM/go/195013117/direct/01/

You are not authorized to post a reply.

Forums >GPTalk >GPTalk Mailing List > [gptalk] Settings when using security filtering

ActiveForums 3.7

Ads

The GPTalk Mailing List

List Posts

Members

Ads