Re: Parrent and Child GPOs

From: Chriss3 (noSpamHere_at_chrisse.se)
Date: 03/07/04 

Date: Sun, 7 Mar 2004 18:21:26 +0100

Hi Jesper, a Site can contains computers from multiple domains in the
particular forest, both root and child in your case if you want. By link /
create a GPO at Site level the particular GPO will apply to all computers in
the particular Site. This site can contains computers in both domains. 

-- 
Regards
Christoffer Andersson
No email replies please - reply in the newsgroup
"Jesper" <hobbes@NOSPAMvkr.dk> skrev i meddelandet
news:c2ep3o$1u9c$1@gnd.k-net.dk...
> Hi Chris
> The way I read your answer is:
>
> I can either create/or link a GPO for a site (containing different
computers
> for ex. the computer running my root domain) or I can create/or link a GPO
> for each DC (childs and root).
>
> Neither of these to solutions would resolve my problem - that I want a
user
> (from the root domain) to have a GP depending on, in which domain he logs
> on. The user will either get the GP from the site-object, that contains
the
> computer running the root domain, from the GP placed on the rootDC or from
> the OU where the user is placed (in the rootDC).
>
> Is this correctly understood ?
>
>
> Regards
> Jesper
>
>
> > Jesper, You can set a policy based on each domain if you want. Users in
> > child1 are not possible to login to child2 or root domain, and the other
> way
> > around. The account must exist in each domain.
> >
> > If you want to create a GPO for all domains that doesn't matter what
> domain
> > the particular user are in, You can Link a GPO to an Site Object.
> >
> > -- 
> > Regards
> > Christoffer Andersson
> >
> > No email replies please - reply in the newsgroup
>
>

Relevant Pages

  • Re: Linking GPOs to different OUs within the same domain
    ... Workstations Root OU ... can to all stuff only with users and computers profiles GPO ...
    (microsoft.public.windows.server.active_directory)
  • Re: Parrent and Child GPOs
    ... Regards ... > Hi Jesper, a Site can contains computers from multiple domains in the ... > create a GPO at Site level the particular GPO will apply to all computers ...
    (microsoft.public.win2000.active_directory)
  • Re: Active Directory Folders
    ... >> I'm certainly not going to discount a book published by Microsoft ... >> replace the computers and users containers created by default and ... Passowords can only be set in a GPO at the ... Laptops ...
    (microsoft.public.windows.server.active_directory)
  • Re: Alerting - Malicious software removal tool
    ... >needed to install an application that she could not install from ... >"Administrator" account. ... You failed to analyze the root cause and correct it ... use their computers to have fun. ...
    (microsoft.public.security.virus)
  • Re: GPO Problems
    ... The computer configuration part belongs to computers and the user configuration part to the user, so depending on the settings you must have the accounts located there. ... If rsop.msc or gpresult /v logged on with a user account doesn't give any output there can be additional problems with GPO applying belomging to DNS confgiruration or slow links between sites. ... Only the password policy an account lockout policy have to bet set on ...
    (microsoft.public.windows.server.active_directory)
Loading