Workgroup Auth on a domain

[morganlefay]

So you are not using these things now??

http://technet2.microsoft.com/window...p/default.mspx

There are several built in default GPO templates

Best not to edit existing default policies...but to copy and create a new one...and then tweak from there...then apply the GP when creating the user

Or

Create a security group...called limited users...and then add your users to this group.

Give the limited user group access to the folders you want them to have access to....

Really depends on your existing setup.....and what services and access they need ....such as remote access, OWA, Internet etc???

I like using security groups...for different roles or departments....asigning the groups the permissions ...and then adding or removing users as needed.

MLF