Re: Impact of GPO during logon

From: Simon Geary (simon_geary_at_hotmail.com)
Date: 07/15/04 

Date: Thu, 15 Jul 2004 18:02:35 +0100

That's the right idea but you should not apply the group policy at the
domain level. MS recommend not applying any other GPO at domain level apart
from the Default Domain Policy, although it will still work if you do. (I
don't know why they make this recommendation, but they do. Does anyone else
know why?)

If you remove the authenticated users group from the GPO permissions and
assign your groups the read and apply group policy permissions that will do
the trick.

"Marlon Brown" <marlon_brown@hotmail.com> wrote in message
news:%23ADdnqoaEHA.2544@TK2MSFTNGP10.phx.gbl...
> If I want to apply a certain group policy that maps a drive to a certain
> path upon user login, and I apply that GPO on the root domain and target
> only members of a SpecificGroup, that GPO will not be processed or impact
> login performance for users that are non members of that group, right ?
> Just wanted to confirm because I receive too many requests to map drives
> based on group membership and I wanted to make sure that is viable.
>
>

Relevant Pages

  • Re: Multi site group policy - best practices question.
    ... In general it makes sense to configure a GPO at the domain level that you ... GPO with common settings that I wanted applied to all domain users and use ... > specific "users" group policy requirements that the other sites do not. ...
    (microsoft.public.windows.group_policy)
  • Re: How not to apply
    ... You can configure filtering of Group Policy using either OUs or security ... you can create a second GPO that only ... > Screen saver is activated via GPA at the domain level. ...
    (microsoft.public.win2000.group_policy)
  • Re: Using GP to add exceptions to Windows Firewall
    ... > I recommend you to modify the existing Group Policy Object. ... > In doing so, when the client computer starts up, it will load only 1 GPO ... We usually recommend you to keep as fewer GPO ...
    (microsoft.public.windows.server.sbs)
  • Re: Exchange OWA 2003 Trusted Root Certificate
    ... That should work fine with the GPO at the domain level. ... > So for this example, create 2 Global Groups, perhaps one called Mail_Users ... >> for computers that you want the Group Policy to apply to. ...
    (microsoft.public.win2000.security)
  • Re: Impact of GPO during logon
    ... If you want to apply a GPO to a group of users, ... how ever you can have another policy at domain level if you think ... > assign your groups the read and apply group policy permissions that will ... >> only members of a SpecificGroup, that GPO will not be processed or impact ...
    (microsoft.public.win2000.active_directory)