Originally posted by goathead
Other advantages: you can synchronise system clocks on the clients to the server (very useful, I've found, for backup purposes, specifically if someone needs to recover a file as well as chain-of-evidence), any future changes are a simple tweak to the script and the clients get it the next time they log on to the domain, etc.
This should help somewhat in finding a solution. There're a lot of ways of doing this, so running through search results probably is the best way in this case. Just make sure that the examples are applicable to an AD environment if that's what you're working in - while the NT4 and 2000 methods aren't necessarily mutually-exclusive, there are things that work in one but not the other and vice-versa.
Also, out of curiosity: why do they need keyring drives? If it's a case of 'they don't need it but want to play with it', you might be better off (again, using GPO) disabling their access to USB devices.
Leave a comment: