Contract Worker

[Jason]

Hello

We are getting two contracts to help due to our work load, we want to
restrict these users to be complete locked down whats the easy way to do
this?
Create an OU in active directory
add the computers they ware going to use
then add a gpo called restricted groups

????

 

[Brooke Justice]

Jason wrote:
> Hello
>
> We are getting two contracts to help due to our work load, we want to
> restrict these users to be complete locked down whats the easy way to do
> this?
> Create an OU in active directory
> add the computers they ware going to use
> then add a gpo called restricted groups
>
> ????
>
>
>
>

Yes, create an OU somewhere, even underneath another OU. Add their
computers and user accounts to that OU. Then create a GPO and link it to
that OU with the settings that you want locked down. You can also add
the users and computers to a group (if computer settings are included in
the GPO) and apply that policy to that group instead of authenticated users.

hth,
Brooke

 

[Jason]

Cheers Brook

Nice reponse i have a question how do you lock down a computer from GPO i
don't want to break the computer


Cheers

"Brooke Justice" wrote in message
news:u0IWTVmUKHA.4816@TK2MSFTNGP06.phx.gbl...
> Jason wrote:
>> Hello
>>
>> We are getting two contracts to help due to our work load, we want to
>> restrict these users to be complete locked down whats the easy way to do
>> this?
>> Create an OU in active directory
>> add the computers they ware going to use
>> then add a gpo called restricted groups
>>
>> ????
>>
>>
>
> Yes, create an OU somewhere, even underneath another OU. Add their
> computers and user accounts to that OU. Then create a GPO and link it to
> that OU with the settings that you want locked down. You can also add the
> users and computers to a group (if computer settings are included in the
> GPO) and apply that policy to that group instead of authenticated users.
>
> hth,
> Brooke

 

[Ace Fekay [MCT]]

"Jason" wrote in message
news:ez2$ygmUKHA.4592@TK2MSFTNGP06.phx.gbl...
> Cheers Brook
>
> Nice reponse i have a question how do you lock down a computer from GPO i
> don't want to break the computer
>
>
> Cheers
>
> "Brooke Justice" wrote in message
> news:u0IWTVmUKHA.4816@TK2MSFTNGP06.phx.gbl...
>> Jason wrote:
>>> Hello
>>>
>>> We are getting two contracts to help due to our work load, we want to
>>> restrict these users to be complete locked down whats the easy way to
>>> do this?
>>> Create an OU in active directory
>>> add the computers they ware going to use
>>> then add a gpo called restricted groups
>>>
>>> ????
>>>
>>>
>>
>> Yes, create an OU somewhere, even underneath another OU. Add their
>> computers and user accounts to that OU. Then create a GPO and link it to
>> that OU with the settings that you want locked down. You can also add the
>> users and computers to a group (if computer settings are included in the
>> GPO) and apply that policy to that group instead of authenticated users.
>>
>> hth,
>> Brooke
>
>


What exactly do you want to 'lock down?'

If you simply create the user as a Domain User, and your shares and Security
permissions into the folders do not allow 'Domain Users,' (where you are
using groups to control access), then you should be fine without having to
go through the hoops of creating an OU and a GPO just for that user or
computer.

You can go into the contract user's account and specify which machine he/she
can only log into.

Otherwise, can you elaborate on exactly what you want locked up?

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.

 

[Brooke Justice]

Jason wrote:
> Cheers Brook
>
> Nice reponse i have a question how do you lock down a computer from GPO i
> don't want to break the computer
>
>
> Cheers
>
> "Brooke Justice" wrote in message
> news:u0IWTVmUKHA.4816@TK2MSFTNGP06.phx.gbl...
>> Jason wrote:
>>> Hello
>>>
>>> We are getting two contracts to help due to our work load, we want to
>>> restrict these users to be complete locked down whats the easy way to do
>>> this?
>>> Create an OU in active directory
>>> add the computers they ware going to use
>>> then add a gpo called restricted groups
>>>
>>> ????
>>>
>>>
>> Yes, create an OU somewhere, even underneath another OU. Add their
>> computers and user accounts to that OU. Then create a GPO and link it to
>> that OU with the settings that you want locked down. You can also add the
>> users and computers to a group (if computer settings are included in the
>> GPO) and apply that policy to that group instead of authenticated users.
>>
>> hth,
>> Brooke
>
>

There's a million things that you could lock down on a computer. To
follow what Ace said, more info to the newsgroup would help. what
exactly do you want to keep them from doing?

Brooke