Hamins

Yes yes, thats the obvious way of doing it. I'm wondering if there's another way of doing this, without creating another OU/Sub-OU

Hi Allen, Thanks for the response. What I meant was that I need a physical with non-admin rights, to be able to change the network settings (Manually).

Hi Undeadsoldier, Thanks for your response, but thats not what I'm looking for. I want a user with non-admin rights to be able to change the IP address.

Hi everyone, We have a domain with one Win2003 server as the DC and around 30 XP workstations, and the same number of users. None of the user have Admin rights. All the users belong to the same OU & group. They all have roaming profiles. Since the users don't have admin rights, they cannot change the Network Settings (IP address, Subnet, gateway, DNS etc) on their local workstatios. Out the the 30 user's I need to grant one user the right to change the Network settings on any local workstation, without granting that user any additional Admin priviledges. How do I do that, without creating a completely new group/OU, and then setting the appropriate GPO settings on that group/ou.

Thanks for your response guys. I've already tried most of the above mentioned suggestion, but they don't work. Some programs still get installed.

There is a Windows Folder in every user's profile folder. Is the home folder on the server the same as where the user's roaming profile is stored ??

Try this registry key .. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion

Yes, it's possible to remove the prompt of the installation you do not require. Right-click on My Computer - > Properties - > Advanced. Click the Settings button under Startup & Recovery. Now, there're two things you could do over here, to solve your problem. But, before doin either, determine the installation of Windows XP you want to boot from, by default. The first solution would be to Select the Default Operating System from the drop-down list, and set the Time to Display List of Operating Systems to 1 sec. The second option would be to click on the EDIT button. This opens up the edit window for the BOOT.INI file. In BOOT.INI you will see a list of the operating systems installed. It'll look somethig like this : - multi(0)disk(1)rdisk(0)partition(1)\WINDOWS="Windows XP Professional" /fastdetect multi(0)disk(0)rdisk(0)partition(2)\WINNT="Win XP Professional" /fastdetect Determine the installation that you DO NOT require, and either remove or comment (REM) out the line for that installation. Save the BOOT.INI file, and reboot the PC. This should do it.

The easiest way to do this is with the start menu as the Windows XP style. Right-click on My Documents - > Properties - > Change Target folder. That's all !

Hi aspenjim, According to me there're 2 ways of doing this. One is FOLDER RE-DIRECTION via GPO. This way, the user will be able to save their files in their My Documents folder, but when they log-off their My Documents folder will get synched with the one on the server. The other method is to create a shared folder on the server, and sub-folder for each user, with approprite security rights. Then, change the TARGET folder of each user's My Documents folder to point to the shared folder on the server.

None of the users have admin rights. However, they can still save data on the Local HDD of the client PCs. They can also install certain programs.

Hi Bad boy, I hope this link helps .... http://support.microsoft.com/kb/297684/EN-US/

Thnx for your response Ctrl-X. However, I know of roaming profiles and folder re-direction, and have already implemented them on the network. I'm looking for a way to deny users from saving anything onto the local drives. They should be able to save all work related data in a specific folder on the server. Anyone know how to do that ?

Interesting product. However, I'm looking for lost-cost solution, using the existing resources (Active Directory/GPO). Thanks anyway, Tain

Hi, We have a network running a single Windows 2003 Std. server (Acts as file/print server, DC, DHCP, DNS etc.) with around 25 XP clients. All the data lies centrally on the server. The users are not supposed to save data locally on the client PCs they're working on. Is there any way (GPO etc.) to prevent users from saving any data onto the local (client PC) drives ? Also, is there any way to preventing users from installing any application onto the client PCs ? A detailed response would be really appreciated. Thanks !

Issue resolved (I think). Thanks Cuberti

Hi, We have a single Windows 2003 (Std. Edition) Domain Controller with 26 workstations. For the past coupla days the event manager shows a FILE REPLICATION ERROR. The EventID is 13568. It Says JRNL_WRAP_ERROR. I'm confused as to why this error has come up, considering the fact that there is only ONE Domain Controller in the entire DOMAIN. Can someone help me sort this issue out ?

Anyone ??

Thnx a ton kyuuzo

How can I disable access to command prompt ? It is possible possible via Group Policys ? If, yes, what policy ? I would also like to restrict access to the registry editor. Thanks

Hi, How can I format the interactive logon text message ? I'm adding this via Group Policy on the 2003 server. I would like to format the message text with proper spacing, carriage returns, and paragraphs.

Hi Chilifrie, Thanks for the info..... I'll try them out... Yes, the user can install software such as Rapidocs, even if they don't have any admin rights.

Hi everyone , Everyone keeps saying that it's possible via GPO restriction. However, no one says which policy(s) in particular.

Hi Cuberti, I read the term "Enforced Paths" in a BS7799 questionaire. To put in a nutshell, "Enforced Path" means that a user with the appropriate access control, is able to access certain data from specific workstation or range of workstations. It is required to ensure routes between users and authorized services are channeled and restricted to prohibit network roaming. How does on achieve this on a Win2003 server/WinXP client based network ?

anyone ?