Re: OU level

From: anonymous (anonymous_at_discussions.microsoft.com)
Date: 07/07/04


Date: Wed, 7 Jul 2004 12:40:37 -0700

Do you have to be a member of domain users in order to
access the domain? Also, I tested my first user under
the new ou which I setup a group policy. Both the new ou
for users and the old users have the same group policy.
The test user should get the logon.scr screensaver that
locks with the users network password but instead it just
allows user to go back to desktop without a password.
Under the group policy I setup logon.scr as the exe and a
timeout of 600 seconds.? Is the password not working
because it is trying to run both group policies. (The
user is a member of domain users which is under the old
user ou)
>-----Original Message-----
>Location of the domain users group has no bearing on
what rights it bestows.
>Basically look at permissions on objects and anywhere
where you see domain
>users, that means anyone in that group gets that access.
>
> joe
>
>--
>Joe Richards Microsoft MVP Windows Server Directory
Services
>www.joeware.net
>
>
>
>anonymous wrote:
>> Hi all,
>> I orginially setup my users under the users OU. Now I
>> realize that I needed to create an OU at the same
level
>> as users so that I could add a group policy. (I now
have
>> the group policy running under the entire domain). I
want
>> to be able to put all my users say in a OU called
NTusers
>> and leave the admin account under users then move the
>> group policy from the entire domain to only the
ntusers
>> OU. All my users are members of domain users. My
>> question is would I move domain users group under
ntusers
>> along with all my other groups that are setup such as
>> wins, dhcp ect or should I leave them under users?
I'm a
>> little confused on just what rights a member of the
>> domain user group inherits.
>> Thanks in advance for any help on the best way to have
a
>> group policy but not include admin and domain admins.
>> Sherry
>.
>



Relevant Pages

  • Re: OU level
    ... the ACL and it will tell you if domain users has access. ... Groups the user are a member of does not impact gpo's unless you have done group ... > the new ou which I setup a group policy. ...
    (microsoft.public.win2000.active_directory)
  • RE: exclude laptop from a gpo
    ... When I made my group policy for the Internet Explorer I have the the scope ... set for Authenciate Users and Domain Users. ... I did mark the SBSLaptops not to inherit. ... So the laptops will not apply the GPO because it has been blocked. ...
    (microsoft.public.windows.server.sbs)
  • Re: adding a group to local computer
    ... It happens regardless of which group I add. ... As far as group policy, I was looking through the group policy settings last ... why must all your domain users be local admin? ...
    (microsoft.public.windows.server.active_directory)
  • Group Policy Issue - I Think
    ... I have a 2003 server domain with xp clients in the domain users group that ... view all the https sites with no problem but then back as a domain user and ... I think this might be a group policy issue but i am not sure. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Admin account
    ... You can try to use Group Policy for domain users to prevent them form doing such ... > requires Admin rights on the local machine. ...
    (microsoft.public.win2000.security)