-
Notifications
You must be signed in to change notification settings - Fork 0
Lab05ADDSGroupPolicy
In the "Tools" tab of Server Manager, select "Active Directory Users and Computers"
- Make a new OU called SYS255
- Under this make more OUs called "Accounts" "Computers" and "Groups"
- Make new users "Alice" "Bob" and "Charlie" poster
Move wks01 to the new computers tab
Make a new global security group called "custom desktop" and add the users Alice and Bob
NOTE: It is best practice to name groups after what they do
In the Group Policy Management tool to make a new Group Policy called sys255-desktop, and changed the filters so the only groups in them were "custom-desktop" and "Domain Computers." In the properties of this new GP I then changed the "Apply Group Policy" permission of the Domain Computers to Deny.
Right clicking and selecting "Edit" on sys255-desktop brings up the Group Policy Management Editor. There I could find the "Remove Recycle Bin Icon from Desktop" Setting and enable it, so that people in that group will not see the Recycle Bin.
- Check to see if it worked with
gpresult /r
Make a new Group Policy under Computers called DisableLastLogin.
In Group Policy Management Editor for DisableLastLogin find the setting "Don't Display last signed in" and enable it
- Force an update on the computer by running the command
gpupdate /force - Check the status of group policies with
gpresult /scope computer /r