locked
win 2003 AD Group ploicy RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote
    I am using windows 2003 Active directory to manage approx 50 users in my organization. this is an ad agency and all the users required full time internet access. All the users are login to the domain as normal user( and locally they are limited user). In this case the users don't have the right to open the date and time function, unable to install new fonts and they cant share there local folders. So I looking for a solution to grant this permission to a user group. We cant add them to administrators group because users are misusing the systems by installing unnecessary programs. Kindly help me doing it through grop policy editor and how and where can edit it etc? Early reply really appreciated. Thanks and regards Surabu
    Saturday, March 21, 2009 8:54 AM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote
     

    Hi,

     

    System Time:


    You can add the users group to the security setting: Change the system time (Security Settings\Local Policies\User Rights Assignment).

     

    Install New Fonts:


    1. Go to %SystemRoot%.

    2. Right click the Fonts folder and give the users group both Read and Write Permission to this folder.

    3. Run regedit.

    4. Go to the key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Fonts.

    5. Right-click Fonts, click Permission. Give users group Full Control to this key.

     

    Share Local Folders:


    You can use the utility Tweak UI to delegate the permission:

    http://social.technet.microsoft.com/forums/en-US/winserversecurity/thread/8580b05d-0703-44fe-9957-f716667c3d9c

     

     

    Thanks.

    • Marked as answer by Joson Zhou Monday, March 30, 2009 3:41 AM
    Tuesday, March 24, 2009 10:04 AM