1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Help needed to block upper levels!!!

Discussion in 'Software' started by Greebo, Jul 2, 2004.

  1. Greebo

    Greebo Byte Poster

    182
    0
    21
    Please help me ASAP. Changed Student profile which is brilliant BUT they can go up the levels to server etc!!! :eek:
    How the hell do I restrict them???
    Please help
     
  2. Phil
    Honorary Member

    Phil Gigabyte Poster

    1,680
    7
    87
    How do you mean Greebo? How did you change the student profile and from where can they see the rest of the server?
     
    Certifications: MCSE:M & S MCSA:M CCNA CNA
    WIP: 2003 Upgrade, CCNA Upgrade
  3. Greebo

    Greebo Byte Poster

    182
    0
    21
    A mandatory profile has been set up for the students. Each student uses this profile and all is tickerty-boo. Discovered yesterday that if a student double-clicks in the start menu on programs, that they can move things around and also that they can go up levels to view the network :ohmy


    Also, if they click on the address bar they can browse the network
    Don't want this to happen but I don't know how to stop it :( :cry:
     
  4. Phil
    Honorary Member

    Phil Gigabyte Poster

    1,680
    7
    87
    Do the changes they've made remain when they log out then back in again? How locked down do you have their settings? There are a whole host of restrictions you can make within group policy under

    User Configuration > Administrative templates

    These may help you to restrict their access.
     
    Certifications: MCSE:M & S MCSA:M CCNA CNA
    WIP: 2003 Upgrade, CCNA Upgrade
  5. Greebo

    Greebo Byte Poster

    182
    0
    21
    Their changes are to the actual mandatory profile mate, so its effects are carried over :eek: When we spot the changes, we put them right but need to stop the little @!*%$!*@ from making changes in the first place :rolleyes:

    I know bugger all about Policies apart from where they're kept so more info would be good :oops:

    Also want to lock out the image search capablities within google. I know it can be done but not sure how ?
     
  6. Phil
    Honorary Member

    Phil Gigabyte Poster

    1,680
    7
    87
    Certifications: MCSE:M & S MCSA:M CCNA CNA
    WIP: 2003 Upgrade, CCNA Upgrade
  7. Greebo

    Greebo Byte Poster

    182
    0
    21
    Thank You Phil :hug I know I'll get there in the end :rolleyes: With alot of help from you guys :oops: :study
     
  8. Phil
    Honorary Member

    Phil Gigabyte Poster

    1,680
    7
    87
    Certifications: MCSE:M & S MCSA:M CCNA CNA
    WIP: 2003 Upgrade, CCNA Upgrade
  9. Greebo

    Greebo Byte Poster

    182
    0
    21
    Thanx for the links mate :) Will give me some bedtime reading:study :eyecrazy and hopefully I will start to understand how things SHOULD be set up :blink

    Here's hoping :)
     
  10. tripwire45
    Honorary Member

    tripwire45 Zettabyte Poster

    13,493
    179
    287
    Well, that's *one* way to get a good night's sleep...zzzzzzzzzzzzzzz. :biggrin
     
    Certifications: A+ and Network+
  11. Greebo

    Greebo Byte Poster

    182
    0
    21
    :cry: Hopefully I'll fall asleep after I've finished reading
    Smillies are acting wierd ? Sad puppy not displaying ?
     
  12. tripwire45
    Honorary Member

    tripwire45 Zettabyte Poster

    13,493
    179
    287
    :puppy Let's see...You're right...that's one odd sad puppy.
     
    Certifications: A+ and Network+
  13. Greebo

    Greebo Byte Poster

    182
    0
    21
    You didn't believe me did you :cry:

    Alas poor sad puppy
     
  14. tripwire45
    Honorary Member

    tripwire45 Zettabyte Poster

    13,493
    179
    287
    I dunno...I think the cat looks pathetic enough. :blink
     
    Certifications: A+ and Network+
  15. Greebo

    Greebo Byte Poster

    182
    0
    21
    Eh :blink You leave my pussy outta this


    Its sweet :biggrin
     
  16. Bluerinse
    Honorary Member

    Bluerinse Exabyte Poster

    8,871
    167
    256
    I would suggest that you log into your domain controller as administrator, go to Active Directory Users and Computers. Create a new Organisational Unit (OU) and name it test.

    Move one of the student computers into this new OU.

    Right click the new OU, go to properties and click on the Group Policy tab, then create a NEW policy.

    Edit the new policy elements that you require to lock down the computer, do this under the computer node rather than the user nodes.

    Test the results bearing in mind that Group policy takes time to propergate unless you force it immediately.

    When you are satified that you have achieved the correct level of lock down, you can move all the other computers into the new OU and the GPO will propergate to those as well.

    If all goes tits up, just move the computers back to where they were, delete the GPO you created and then delete the test OU

    Pete
     
    Certifications: C&G Electronics - MCSA (W2K) MCSE (W2K)
  17. Greebo

    Greebo Byte Poster

    182
    0
    21
    Thanx mate :) Will give it a go
     

Share This Page

Loading...