E
Ebonweaver
I'm baffled to find there may actually be no way to do this....
I need to restrict application use for various users on a machine. This is best done by groups obviously, as all users are in the domain, and we have groups in the domain, I just want to manage those groups.
MMC -> add snap in -> Group Policy -> Browse -> users
Ok now what? The problem is it only shows Administrators and Non-Administrators for compatible groups. No other local groups are listed, and I can't browse for AD groups. Adding a local group that contains domain groups is fruitless as the local group doesn't show up for some reason.
Surely there is a way to add groups to manage policy....
Goal: Once I can pick the right group, I then go to user configuration/admin templates/system and set up the run only specified applications.
Continue reading...
I need to restrict application use for various users on a machine. This is best done by groups obviously, as all users are in the domain, and we have groups in the domain, I just want to manage those groups.
MMC -> add snap in -> Group Policy -> Browse -> users
Ok now what? The problem is it only shows Administrators and Non-Administrators for compatible groups. No other local groups are listed, and I can't browse for AD groups. Adding a local group that contains domain groups is fruitless as the local group doesn't show up for some reason.
Surely there is a way to add groups to manage policy....
Goal: Once I can pick the right group, I then go to user configuration/admin templates/system and set up the run only specified applications.
Continue reading...