Windows 2000 policies

[slayerhawk]

Ok...I'm hoping for some help in working with policies on a 2000 server. I am needing to completely lock a person out of accessing anything except for 1-2 directories. I figure that the easiest way to do this is by using policies.

Can someone tell me how to make a policy and apply it to just one user? I've tried, and the policy is made effective for the local computer...

Please help.

thanks.

 

[beer]

If I were to do this, I would select everything on the hard drive, right click and go to security, and make sure only user 'SYSTEM' has full control. You can keep any permissions for other users, but you can't have generic groups like 'everyone' or 'authenticated user.' Remove any of thsoe generic groups and let the permissions propogate.
Go to the directories you want the user to have, and add the user [COMPUTERNAME]\[USER] (no brackets) and set the permissions accordingly.

Private Message me if you need more assistance, I don't check this forum regularily.

EDIT: Obviously this is assuming a local computer under a multiuser environment. Since you didn't specify any domain or file servers....

 

[err]

well your question is kinda vague....

First off, is the win2k server a file server ? Is that other person mapping 1-2 directories to the file server ? If yes, it should be easy as you would only configure share permission on the directory and you're done with it.

If this is not a file server, will that person logon locally to the server to access his resources ? If yes, this would be a lot more tricker as you would restrict his access on the desktop through local policies, computer policies & user policies.

Let us know. We'll help you out 🙂

eRr