|
Posted by Roger Abell [MVP] on October 19, 2006, 1:44 am
If you were Registered and logged in, you could reply and use other advanced thread options You would need to author a client side extension for group policy.
Otherwise look at such as www.desktopstandard.com offering of
specific free use terms for their products in certain circumstances.
What you have done to apply via a template could be programmed
as a task that periodically runs.
> What do you exactly mean with "resorting to third party extensions"? Is
> there any freeware program that can do it? or maybe with VB?
>
> Yes, I apply the template and it makes me notice it everything goes ok
> but... I want it to automatically remove the users that should not be
> there, in the restricted groups.
>
> Roger Abell [MVP] wrote:
>> > Is there a way to make "restricted groups" automatically remove members
>> > of a restricted group in a standalone computer (out of a domain).
>> >
>>
>> Without resorting to third-party extensions, no.
>>
>> > Using templates and analyzing the computer, it says there is something
>> > wrong in the computer when a user that is not suposed to be there is
>> > member of a restricted group but, how can I remove it automatically
>> > from
>> > that group? It is supposed to work in a domain workstation, but what
>> > about in a standole computer?
>> >
>> The only time I have found to apply restricted group definitions to
>> a standalone is basically by applying a template, which is a manual
>> action in Sec Config and Analysis snapin. One could consider use
>> of a scheduled application via secedit command utility.
>
|