Home

Allow access to Office products via GPO

%3CLINGO-SUB%20id%3D%22lingo-sub-302387%22%20slang%3D%22en-US%22%3EAllow%20access%20to%20Office%20products%20via%20GPO%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-302387%22%20slang%3D%22en-US%22%3E%3CP%3EGood%20evening%2C%26nbsp%3B%20I%20have%20a%20small%20environment%20that%20I%20setup%20few%20months%20back%20for%20a%20private%20school%20that%20has%20about%2015%20computers%20including%205%20general%20purpose%20library%20computers%20that%20students%20can%20use.%26nbsp%3B%20In%20AD%20I%20have%20a%20student%20user%20which%20is%20shared%20by%20all%20students%20to%20log%20into%20the%205%20computers%20mentioned%20above.%26nbsp%3B%20The%20student%20account%20is%20heavily%20restricted%20in%20what%20it%20can%20do%20on%20the%20computer.%26nbsp%3B%20I%20pretty%20much%20only%20allow%20filtered%20access%20to%20the%20internet%20via%20a%20single%20Browser%20ICON%20on%20the%20desktop.%26nbsp%3B%20They%20are%20not%20allowed%20to%20do%20anything%20else%20on%20the%20computers%20such%20as%20access%20directory%20structure%2C%20or%20other%20areas.%26nbsp%3B%20A%20requirement%20now%20is%20to%20allow%20the%20students%20use%20Microsoft%20Office%20applications%20and%20save%20their%20data%20on%20their%20personal%20USB%20sticks.%26nbsp%3B%20Not%20initially%20a%20fan%20of%20using%20USB%20sticks%20on%20the%20network%2C%20I%20am%20planning%20on%20placing%20these%205%20PCs%20in%20their%20own%20VLAN%20and%20allowing%20access%20to%20the%20internet%20ONLY.%20%26nbsp%3B%20My%20question%2C%26nbsp%3B%20is%20there%20a%20GPO%20setting%20that%20I%20can%20configure%20so%20I%20can%20allow%20access%20to%20Office%20apps%20and%20perhaps%20the%20USB%20drive%20folder%20on%20these%20computers%3F%26nbsp%3B%20Right%20now%20the%20desktop%20is%20empty%20as%20I%20stated%20above%20except%20a%20single%20icon.%20%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-302387%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EActive%20Directory%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%20Server%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-302455%22%20slang%3D%22en-US%22%3ERe%3A%20Allow%20access%20to%20Office%20products%20via%20GPO%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-302455%22%20slang%3D%22en-US%22%3E%3CP%3EThese%20ones%20should%20get%20you%20started.%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fdownload%2Fdetails.aspx%3Fid%3D49030%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fdownload%2Fdetails.aspx%3Fid%3D49030%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fblogs.technet.microsoft.com%2Fmspfe%2F2010%2F09%2F09%2Fhow-to-use-windows-7-to-lock-down-removable-media-and-keep-your-computer-safe%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fblogs.technet.microsoft.com%2Fmspfe%2F2010%2F09%2F09%2Fhow-to-use-windows-7-to-lock-down-removable-media-and-keep-your-computer-safe%2F%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
rickysandhu
Occasional Visitor

Good evening,  I have a small environment that I setup few months back for a private school that has about 15 computers including 5 general purpose library computers that students can use.  In AD I have a student user which is shared by all students to log into the 5 computers mentioned above.  The student account is heavily restricted in what it can do on the computer.  I pretty much only allow filtered access to the internet via a single Browser ICON on the desktop.  They are not allowed to do anything else on the computers such as access directory structure, or other areas.  A requirement now is to allow the students use Microsoft Office applications and save their data on their personal USB sticks.  Not initially a fan of using USB sticks on the network, I am planning on placing these 5 PCs in their own VLAN and allowing access to the internet ONLY.   My question,  is there a GPO setting that I can configure so I can allow access to Office apps and perhaps the USB drive folder on these computers?  Right now the desktop is empty as I stated above except a single icon.  

 

Thank you 

1 Reply
Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
46 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
30 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
13 Replies