Restricted groups in a standalone computer

Restricted groups in a standalone computer

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Restricted groups in a standalone computer abc 10-17-2006
Posted by abc on October 17, 2006, 12:45 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Is there a way to make "restricted groups" automatically remove members
of a restricted group in a standalone computer (out of a domain).

Using templates and analyzing the computer, it says there is something
wrong in the computer when a user that is not suposed to be there is
member of a restricted group but, how can I remove it automatically from
that group? It is supposed to work in a domain workstation, but what
about in a standole computer?

Thanks.

Posted by Roger Abell [MVP] on October 17, 2006, 8:37 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
> Is there a way to make "restricted groups" automatically remove members
> of a restricted group in a standalone computer (out of a domain).
>

Without resorting to third-party extensions, no.

> Using templates and analyzing the computer, it says there is something
> wrong in the computer when a user that is not suposed to be there is
> member of a restricted group but, how can I remove it automatically from
> that group? It is supposed to work in a domain workstation, but what
> about in a standole computer?
>
The only time I have found to apply restricted group definitions to
a standalone is basically by applying a template, which is a manual
action in Sec Config and Analysis snapin. One could consider use
of a scheduled application via secedit command utility.



Posted by .eaemtxy on October 18, 2006, 2:31 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
What do you exactly mean with "resorting to third party extensions"? Is
there any freeware program that can do it? or maybe with VB?

Yes, I apply the template and it makes me notice it everything goes ok
but... I want it to automatically remove the users that should not be
there, in the restricted groups.

Roger Abell [MVP] wrote:
> > Is there a way to make "restricted groups" automatically remove members
> > of a restricted group in a standalone computer (out of a domain).
> >
>
> Without resorting to third-party extensions, no.
>
> > Using templates and analyzing the computer, it says there is something
> > wrong in the computer when a user that is not suposed to be there is
> > member of a restricted group but, how can I remove it automatically from
> > that group? It is supposed to work in a domain workstation, but what
> > about in a standole computer?
> >
> The only time I have found to apply restricted group definitions to
> a standalone is basically by applying a template, which is a manual
> action in Sec Config and Analysis snapin. One could consider use
> of a scheduled application via secedit command utility.


Posted by Roger Abell [MVP] on October 19, 2006, 1:44 am
If you were  Registered and logged in, you could reply and use other advanced thread options
You would need to author a client side extension for group policy.
Otherwise look at such as www.desktopstandard.com offering of
specific free use terms for their products in certain circumstances.
What you have done to apply via a template could be programmed
as a task that periodically runs.

> What do you exactly mean with "resorting to third party extensions"? Is
> there any freeware program that can do it? or maybe with VB?
>
> Yes, I apply the template and it makes me notice it everything goes ok
> but... I want it to automatically remove the users that should not be
> there, in the restricted groups.
>
> Roger Abell [MVP] wrote:
>> > Is there a way to make "restricted groups" automatically remove members
>> > of a restricted group in a standalone computer (out of a domain).
>> >
>>
>> Without resorting to third-party extensions, no.
>>
>> > Using templates and analyzing the computer, it says there is something
>> > wrong in the computer when a user that is not suposed to be there is
>> > member of a restricted group but, how can I remove it automatically
>> > from
>> > that group? It is supposed to work in a domain workstation, but what
>> > about in a standole computer?
>> >
>> The only time I have found to apply restricted group definitions to
>> a standalone is basically by applying a template, which is a manual
>> action in Sec Config and Analysis snapin. One could consider use
>> of a scheduled application via secedit command utility.
>



Similar ThreadsPosted
problem with "Restricted Groups" within a GPO linked to my domain. January 22, 2006, 1:03 am
Standalone Root- Standalone Sub September 13, 2005, 3:43 pm
Nesting domain groups under local groups March 18, 2007, 3:53 am
Standalone CA's and CRL August 27, 2008, 9:10 pm
Standalone/ Enterprise CA issue October 18, 2005, 2:52 am
PKI Cert for a website on a standalone server. September 24, 2007, 2:46 pm
Smart Card Authenticatyion to standalone PC January 10, 2008, 7:27 am
standalone CA - cannot use browser to install certs February 1, 2008, 3:41 pm
Standalone vs Enterprise root CA security. April 8, 2008, 8:13 pm
IE options Restricted August 29, 2005, 11:11 am

The site map in XML format XML site map

Contact Us | Privacy Policy