i want to centralized all the thing in active directory like centralized means i do not have to do in every Client but I will only do in the Domain controller..... - Blocking & allowing only Some website in my Official Network - Giving permission to user on DOmain to Do some jobs etc....... like Disconnecting LAN,installing Softwares ..... if it is Possible please HELP ME WITH THE STEPS ........... Student , XI Akshay Deep Lamba

Yes. If you have running on AD, every thing is already centralized. You sitting on the DOmain controllr have all the control. For example1. You can block web sites through group policy http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/SBS_Small_Business_Server/Q_23870356.html2. You can give what ever permission you want from DC (domain resources, mail boxes etc). http://forums.msexchange.org/m_1800455227/tm.htm3. Installing software for users can be blocked through group policy and then you can start the installation by pushing any SW through GPs. http://support.microsoft.com/kb/8161024. How to block software installation through group policy http://www.windowsnetworking.com/kbase/WindowsTips/Windows2003/AdminTips/Admin/Howtopreventusersfrominstallingsoftware.htmlAny thing else you wanna do from DC??Raj

Hi, Windows Server 2003 provides centralized management. You can use tools like Active Directory Users and Computers (ADUC) and Group Policy Management Console (GPMC) on Domain Controller to achieve your goal. 1. To block some website in official network, you can use IPSec. Here are the steps: Block Web Browsing with IPSec http://www.petri.co.il/block_web_browsing_with_ipsec.htm Configuring IPSec Policies through GPO http://www.petri.co.il/configuring_ipsec_policies_through_gpo.htm 2. To give permission to domain user to disconnect LAN, you can use this policy: [User Configuration\Administrative Templates\Network\Network connections\Ability to Enable/Disable a LAN connection] For more information, this policy, please refer to the "Ability to Enable/Disable a LAN connection" section on the following article: Using Group Policy Settings with Windows XP Home Networking Features http://technet.microsoft.com/en-us/library/bb457072.aspx 3. To allow domain users to install software, you need to give them local admin rights. Please refer to this thread: how to set administrator rights to domain user http://social.technet.microsoft.com/Forums/en/winserversetup/thread/e9e065a0-ccf2-4081-bb66-d6d1fb83b856 For more information, please refer to: Enterprise Management with the Group Policy Management Console http://www.microsoft.com/windowsserver2003/gpmc/default.mspx Windows Server Group Policy Home http://technet.microsoft.com/en-us/windowsserver/grouppolicy/default.aspx Regards, Bruce

I have made a OU & Assigned The User of OU as MEMBER OF ADMINISTRATOR & DOMAIN ADMIN & Also Given some Priveledge through group policies in the COmputer Configurations & user Configurations Both But Nothing Happens..... I have also Done Ability to Enable/Disable a LAN connection but No Effect is there..... PLEASE HELP ME ....Student , XI Akshay Deep Lamba

Hi Akshay,The links provided by engineers above should suffice your need and to simply in order to centralize you install AD and use Group policy to manage them .

Hi Akshay, Thanks for your response. To verify the GPO was applied, please check the following items: 1. Ensure the problematic computer is in the right OU. 2. Ensure the GPO is linked to the OU which contains the problematic computer. 3. Run gpupdate /force on the problematic clients to update the group policy. Then reboot it to check the result. 4. Did you assign group membership such as Domain Admins to the OU? If so, group policy will not apply to the object (User or Computer) in the group. For more information, please refer to: http://technet.microsoft.com/en-us/library/bb742376.aspx If the problem continues, please collect the following information: 1. On the client, open CMD and run the command "gpresult /v >c:\gpresult.txt". A file gpresult.txt will be saved at C:\ drive. 2. On the DC, open GPMC, right-click Group Policy Results, choose Group Policy Results Wizard, follow the wizard to collect a Group Policy result for problematic XP client and user. You may need to disable XP Firewall temporarily to collect information. Please use Windows Live SkyDrive (http://www.skydrive.live.com/) to upload the c:\gpresult.txt file and GPMC Report and then give us the download address for research. Regards, Bruce

Hi ,Just checking on the issue to know if you had a chance to go through the posts ?