Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a SBS2008 server and I need to restrict program access on a per group basis, see below for the view from Active Directory.

How do I go about restricting the User's in the group "Advisors With Restrictions". I need to stop them from opening certain programs (Word, Excel, Internet Explorer, RegEdit, Control Panel etc etc)

enter image description here

share|improve this question
up vote 1 down vote accepted

You can manage this through Group Policy

User Configuration > Administrative Templates > System > Run only allowed Windows applications 
share|improve this answer
thanks for this - I've found that but, how do I make this specific to a group like above? – LiamB Jun 16 '11 at 20:32
In the Group Policy Management Console. If you already have the policy setup, right click on that OU container and choose "Link an Existing GPO...", then choose it. If you don't have it created, right click on the OU and choose "Create a GPO in this domain, and Link it here..." – Nixphoe Jun 16 '11 at 20:39
Perfect thanks. – LiamB Jun 16 '11 at 20:49

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.