Adding Authorization Controlled Domain Groups: Difference between revisions
From Pumping Station One
| (5 intermediate revisions by the same user not shown) | |||
| Line 22: | Line 22: | ||
** For example: Boss Laser Authorized | ** For example: Boss Laser Authorized | ||
* Create an Authorizer security group | * Create an Authorizer security group | ||
** For example: Boss Laser Authorizer | ** For example: Boss Laser Authorizer | ||
** NOTE: Now is a good time to add all Authorizer (likely danger committee users) to this group. | |||
=== 2) Django Steps === | === 2) Django Steps === | ||
| Line 36: | Line 37: | ||
* Create a new group policy and place it in the OU you originally created | * Create a new group policy and place it in the OU you originally created | ||
* Edit new group policy with the following selection | * Edit new group policy with the following selection | ||
** Computer Configuration | ** Computer Configuration | ||
*** Policies | *** Policies | ||
| Line 42: | Line 42: | ||
***** Security Settings | ***** Security Settings | ||
****** Local Policies / User Rights Assignment | ****** Local Policies / User Rights Assignment | ||
******* (Policy) Allow Log On Locally | ******* (Policy) Allow Log On Locally | ||
******** (Setting) PS1\Domain Admins, PS1\[Authorizer Security Group], PS1\[Authorized Security Group], BUILTIN\Administrators, BUILTIN\Administrators | ******** (Setting) PS1\Domain Admins, PS1\[Authorizer Security Group], PS1\[Authorized Security Group], BUILTIN\Administrators, BUILTIN\Administrators | ||
****** Local Policies / Security Options | |||
******* (Policy) Interactive Logon: Do not require CTRL+ALT+DELETE | |||
********(Setting) Disabled | |||
****** Restricted Groups | |||
******* (Group) PS1\[Authorizer Group] | |||
******** (Member Of) BUILTIN\Administrators | |||
** User Configuration | |||
*** NONE | |||
Here is an example of how the GPO should look. | |||
[[File:BossGroupPolicy.png|Example of group polciy]] | |||
== Final Notes == | |||
To finalize the changes, it is recommended you reboot the affected computer, or run "gpupdate /force" from a command prompt. | |||
