Having users in active directory is good for centralized management of user accounts, it has the benefit to add and remove permissions and change passwords etc, from a remote location instead of being local. In this assignment I will be explaining how to add a user account in active directory with a GPO (Group Policy Object) this GPO will have the permissions set to you can’t access the control panel.
Then I will go to my OU (Organisation Unit) that has the policy. Then I will right click the OU and then click new and then user.
Now ill enter all the info like username, password etc.
Now you can finish you add user wizard and the user will be created.
Now on any computer that is joined to the domain you can login with the username and password you have created, the user that was created will not have access to the control panel as the GPO restrictions are in effect.
Now we are done. If you would like to have access to the control panel just move the user out of the OU or delete the GPO out of the OU.


0 Comments:
Post a Comment