publishing application shortcuts per usergrp's desktop

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

I have a client that has been using Novell Zenworks to publish the icons for
applications for different user groups to their desktop and would like to do
this in a Win2k/2k3 environment. Currently all applications are loaded
locally on Win XP Pro workstations and they want to group the available apps
in a folder on the desktop that the individual groups will need/have access
to.

My question is, is there a way to do this through a GP that will basically
do what they have been doing using Zenworks.

Any help is appreciated
--
mikedee

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi,

mikedee schrieb:
> [software deployment via gpo]
> My question is, is there a way to do this through a GP that will basically
> do what they have been doing using Zenworks.

You can filter the GPO with DSACls.
For each software an own GPO and using the security settings to
give read and apply permissions to the groups.

HTH
Mark
--
Mark Heitbrink - MVP Windows Server
Homepage: www.gruppenrichtlinien.de
W2K FAQ : http://w2k-faq.ebend.de
PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Can you please elaborate, I am not sure what you mean?
--
mikedee


"Mark Heitbrink [MVP]" wrote:

> Hi,
>
> mikedee schrieb:
> > [software deployment via gpo]
> > My question is, is there a way to do this through a GP that will basically
> > do what they have been doing using Zenworks.
>
> You can filter the GPO with DSACls.
> For each software an own GPO and using the security settings to
> give read and apply permissions to the groups.
>
> HTH
> Mark
> --
> Mark Heitbrink - MVP Windows Server
> Homepage: www.gruppenrichtlinien.de
> W2K FAQ : http://w2k-faq.ebend.de
> PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.
>

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

mikedee schrieb:
> Can you please elaborate, I am not sure what you mean?

If you want to deploy software to different securitygroups
you have to work with DSACLs (Directory Service Access Control Lists)
With this you can control who has the right to read and apply
the GPO.

So the problem is:
You have to make a GPO for each Software, to control it.
Inside this GPO you can make the choise who is allowed to get
this Package.

Its not really comfartable with MS integrated functions.

Perhaps you want to take a look at Specops Deploy
http://www.specopssoft.com/products/specopsdeploy/default.asp
They have intgegrated a very simple to use targeting system.

Its based on nearly the same rules like MS, but with
a much more attractive GUI.

HTH
Mark
--
Mark Heitbrink - MVP Windows Server
Homepage: www.gruppenrichtlinien.de
W2K FAQ : http://w2k-faq.ebend.de
PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.