Group Policy - How powerful is it really?

Discussion in 'Security Software' started by Stephen O'Sullivan, Jan 21, 2004.

  1. G/day forum,

    I've got a couple of things I want to ask in relation to what I can and
    cannot do with Group Policy. So, here goes:

    1. Can I disable the usage of USB drives?
    2. Can I disable the usage of Floppy drives?
    3. Can I control the network shares on my Workstations?
    4. Can I control the local users on systems? Group membership, etc....

    If any of ye guru's know the answer can ye let me know if its possible and
    how I would go about doing it.

    Regards,
    Steve.
     
    Stephen O'Sullivan, Jan 21, 2004
    #1
    1. Advertisements

  2. Stephen O'Sullivan

    Chriss3 Guest

    inline and below, I hope the information helps.

    1 & 2 )

    Hide these specified drives in My Computer

    (User Configuration\Administrative Templates\Windows Components\Windows
    Explorer)

    http://msdn.microsoft.com/library/en-us/gp/239.asp

    3 )

    Scripts

    a.. Scripts - Startup/Shutdown: Use this extension to specify the scripts
    that run when you start and shut down the computer. This extension is
    located under the Computer Configuration node. These scripts run on the
    Local System account.
    a.. Scripts - Logon/Logoff. Use this extension to specify the scripts that
    run when a user logs on or logs off the computer. This extension is located
    under the User Configuration node.

    HOW TO: Assign Scripts:
    http://support.microsoft.com/default.aspx?scid=kb;EN-US;322241
    Script Code Share a Folder

    Const FILE_SHARE = 0
    Const MAXIMUM_CONNECTIONS = 25
    strComputer = "."
    Set objWMIService = GetObject("winmgmts:" _
    & "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
    Set objNewShare = objWMIService.Get("Win32_Share")
    errReturn = objNewShare.Create _
    ("C:\Finance", "FinanceShare", FILE_SHARE, _
    MAXIMUM_CONNECTIONS, "Public share for the Finance group.")
    Wscript.Echo errReturn

    Microsoft TechNET Script Center if you working with scripts:
    http://www.microsoft.com/technet/scriptcenter

    4)

    Restricted Groups
    Computer Configuration\Windows Settings\Security Settings\Restricted Groups

    Restricted groups allow an administrator to define two properties for
    security-sensitive groups (that is, "restricted" groups).

    The two properties are Members and Member Of. The Members list defines who
    should and should not belong to the restricted group. The Member Of list
    specifies which other groups the restricted group should belong to.

    When a restricted Group Policy is enforced, any current member of a
    restricted group that is not on the Members list is removed. Any user on the
    Members list which is not currently a member of the restricted group is
    added.

    http://msdn.microsoft.com/library/default.asp?url=/library/en-us/gp/611.asp?frame=true
    --
    Regards,

    Christoffer Andersson
    No email replies please - reply in the newsgroup
    If the information was help full, you can let me know at:
    http://www.itsystem.se/employers.asp?ID=1

    you know the assigned driver letter.
    Andersson] Not sure what you mean with "Control" , You can handle much with
    Group Policy and few lines of VB for manage worksation shares
     
    Chriss3, Jan 21, 2004
    #2
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.