Re: SYSTEM ADMIN
From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 09/12/04
- Previous message: Steven L Umbach: "Re: GPO works for only one user"
- In reply to: anonymous_at_discussions.microsoft.com: "SYSTEM ADMIN"
- Messages sorted by: [ date ] [ thread ]
Date: Sun, 12 Sep 2004 16:53:27 GMT
Well that is a big topic to answer in a newsgroup post but I will give you a start.
I assume you are talking about an Active Directory domain. You can access Group
Policy to edit it in Active Directory users and Computers. For instance to edit the
default domain GPO select the domain container, right click and select properties,
Group Policy where you can edit/add/create Group Policies -GPO. Keep in mind that
Group Policy is applied in this order local>site>domain>OU>child OU where last
defined setting is applied if a Group Policy setting is applied in multiple policies.
Gpresult is the free support tool to help determine what policies are applied to a
user and computer.
There are two parts to Group Policy - computer and user. The computer or user must be
within the scope of influence of the GPO for it to apply. For instance if you create
an Organizational Unit and add a new GPO to it and configure user settings in it,
user accounts must be in that OU or child OU for those settings to apply. **
IMPORTANT** For domain users, password and account policy can only be applied at the
domain level.
You Active Directory domain must have it's dns configuration correct in order for
Group Policy to apply correctly. Review the link below on Active Directory dns to
make sure you are correct in dns configuration.
http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B291382
Generally you configure policies at the domain level that you want to apply to all
users and computers [other than domain controller user rights which are defined in
Domain Controller Security policy ]. Then create Organization Units for users and
computers that you want to have policy applied to them above and beyond domain
settings and create a GPO for each OU's to apply to those OU's . A user or computer
in an OU will still inherit policy settings defined at the domain level though if the
same setting is defined at the domain and OU level - the OU level will apply. Hope
this gets you started. See the links below for more details. --- Steve
http://www.microsoft.com/resources/documentation/windows/2000/server/reskit/en-us/distsys/part4/dsgch22.mspx
http://www.microsoft.com/windows2000/techinfo/planning/management/groupsteps.asp
<anonymous@discussions.microsoft.com> wrote in message
news:a64f01c498ad$a6205f00$a601280a@phx.gbl...
> Hi
>
> This
> is samir here
>
> how do i deploy group policies in win2000 server
>
> for a computer education centre
>
> which different users for DTP, OFFICE, ACCOUNT, ET
>
> PLESE
> REPLY
>
- Previous message: Steven L Umbach: "Re: GPO works for only one user"
- In reply to: anonymous_at_discussions.microsoft.com: "SYSTEM ADMIN"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
