Group Policy and Dual-Purpose Computers

by Mitch Tulloch [Published on 31 May 2005 / Last Updated on 31 May 2005]

Use Group Policy to manage dual-use computers.

Say you have some computers that are used by employees during daytime work hours and for training classes during evenings and weekends. How should you secure this environment using Group Policy? The simplest way is to try to exclusively use user policy settings for this purpose and not machine policy settings. That way, you can configure a looser set of user policy settings for employees that allows them to do their work, and a tighter set of user policy settings for students to lock down what they can do. Since there’s actually quite a bit of overlap between user and machine policy settings (at least as far as registry settings under Administrative Templates are concerned) this approach is often workable.

See Also

Featured Links