Re: GPO Policy won't apply.

From: Yay Deutschland! (kein_at_keinespam.de)
Date: 01/16/05 

Date: Sun, 16 Jan 2005 21:36:29 GMT

Excellent =)

Thanks!

"Mike Aubert" <mikenews2@2000trainers.com> schrieb im Newsbeitrag
news:eJS0Y4A$EHA.3376@TK2MSFTNGP12.phx.gbl...
> Group Policy settings can be under one of two categories:
>
> - Computer Configuration
>
> - User Configuration
>
>
> The Computer Configuration portion of a Group Policy Object will apply to
> any computer accounts in that OU (or Site/Domain).
>
>
>
> The User Configuration portion of a Group Policy Object will apply to any
> user accounts in that OU (or Site/Domain).
>
>
>
> There is no correlation between Computer Configuration and user accounts
> or User Configuration and computer accounts (with the exception of loop
> back processing, but that's another topic).
>
>
>
> You actually have to trace two paths to get all the Group Policy
> settings - one for the computer account and one for the user account.
>
>
> EX:
>
>
>
> Say there was a domain called corp.com with an OU called Corp Users and
> Corp Workstations. All user accounts are in the Corp Users OU and all the
> computer accounts are in the Corp Workstations OU. Now excluding any
> local/site policies or loop back processing, here is where the Group
> Policy information would come from.
>
>
>
> Computer Configuration: corp.com > Corp Workstations OU
>
>
>
> User Configuration: corp.com > Corp Users OU
>
>
>
> None of the Computer Configuration settings in a GPO tied to the Corp
> Users OU will apply, nor will any User Configuration settings in a GPO
> tied to the Corp Workstations OU will apply.
>
>
>
> Because the setting in group policy you are using is under Computer
> Configuration > Windows Settings > Security Settings...you need to be
> concerned where the Computer Accounts are in your OU structure, not the
> user accounts. You need to make sure the policy applies to the computer
> accounts, not the user accounts
>
>
>
> ------------------------------------------------------------------
> Mike Aubert
> MCSE, MCSD, MCDBA
>
> www.2000trainers.com
>
>
>
> "Yay Deutschland!" <kein@keinespam.de> wrote in message
> news:1eAGd.93022$8l.16240@pd7tw1no...
>>I setup a GPO policy to display a logon banner on all of the client
>>computers under active directory under "Computer Configuration". The
>>policy was created on the Domain User's OU (the container where all my
>>users are). Right now I setup the securty settings on domain users to
>>"Apply Group Policy" at the check box. Am I doing something wrong? Do I
>>need another group to "Apply Group Policy" since this is a Computer
>>Configuration and not a user configuration?
>>
>> TIA
>>
>
>

Relevant Pages

  • Re: Using Group Policies on Standalone XP Pro
    ... By far your best option is to use the Shared Computer Toolkit from Microsoft ... users/groups you do NOT want the Group Policy user configuration settings to ...
    (microsoft.public.windowsxp.security_admin)
  • Re: GPO Policy wont apply.
    ... The Computer Configuration portion of a Group Policy Object will apply to ... any computer accounts in that OU. ... User Configuration and computer accounts (with the exception of loop back ... nor will any User Configuration settings in a GPO tied to the ...
    (microsoft.public.win2000.active_directory)
  • Re: Some GP settings not being applied
    ... that the user settings, in the GPO as you outlined, are applied to ... I have 2 rooms of computers, that I want to configure slightly ... So, in the same group policy as above, I set some things like Folder ... Redirection and of course the logon script, in the User Configuration. ...
    (microsoft.public.windows.group_policy)
  • Re: Applying Policy on certain computers only
    ... > on the user settings in the GPO? ... Creat a GPO linked to the COWS OU. ... >> OU within the user configuration side. ... the Windows Group Policy Guide is out from Microsoft Press!!! ...
    (microsoft.public.windows.group_policy)
  • Offline files GPO, User or Computer configuration?
    ... offline files settings to the Computer Configuration? ... then apply the offline settings to the User configuration. ... If we have them on the User Configuration on the OU the user accounts ...
    (microsoft.public.win2000.group_policy)
Loading