Add Restrictions To Certain Local Accounts

N

NickW098

New Member
Messages
3
Reaction score
0
Hello, I am a new user to NTLite and I'm testing out the software and I am trying to figure out if there is a way to add restrictions to certain local accounts? I work at a school district, so I am trying to add certain restrictions to "Student" accounts. I am also wanting to use the "Group Policy" editor to apply these restrictions and export the group policy restrictions I want to the MMC (Microsoft Management Console) for those local accounts. I normally do all of this manually but I am trying to find some easier methods.


Also do you need NTLite Professional to apply those restrictions?
 
Group Policies in general are exported to images, using one of two methods:

1. Export the policy file using LGPO tool, and importing it during Post-Setup. Keeping it in the policy form allows you to both audit and use gpupdate /force to clean up. This can be added as a Post-Setup command to run LGPO.

2. Export the derivative reg entries created by implementing the GPO. This has the same functional effect, but doesn't allow for auditing or forcing the policy. Reg files can be either directly integrated into the image from the Registry page, or added as a Post-Setup file.

Both methods are available to use in the free edition.
 
garlin said:
Group Policies in general are exported to images, using one of two methods:

1. Export the policy file using LGPO tool, and importing it during Post-Setup. Keeping it in the policy form allows you to both audit and use gpupdate /force to clean up. This can be added as a Post-Setup command to run LGPO.

2. Export the derivative reg entries created by implementing the GPO. This has the same functional effect, but doesn't allow for auditing or forcing the policy. Reg files can be either directly integrated into the image from the Registry page, or added as a Post-Setup file.

Both methods are available to use in the free edition.
Click to expand...
So I still have to go into each device and apply their group policy in order to export it to another machine?
 
If you're using Active Directory, then the GPO can be enforced at the domain level since it has authority over all clients. But if you don't have a domain, then policies are just local files that apply to each machine they're installed to. A policy is separate from whatever mechanism is used to deploy it, whether as a domain rule or standalone copy.

Since you didn't ask the question "how do I domain join a PC from NTLite?", I'm assuming you're not using AD.
 
garlin said:
If you're using Active Directory, then the GPO can be enforced at the domain level since it has authority over all clients. But if you don't have a domain, then policies are just local files that apply to each machine they're installed to. A policy is separate from whatever mechanism is used to deploy it, whether as a domain rule or standalone copy.

Since you didn't ask the question "how do I domain join a PC from NTLite?", I'm assuming you're not using AD.
Click to expand...
What about exporting the MMC files to NTLite? How exactly do I get it to apply to all profiles I made on the software? Again, I am new to this software so I don't exactly know how to exactly implement this.
 
Before we get too far, can you detail which type of policy restrictions are being made? I need to know where they are before advising you on which policy files to export?
 
You must log in or register to reply here.
Back
Top