Re: Applying user object policy (filtering based on computer location)



"jm" <jm@GMAIL> wrote in message
news:53E28875-24FE-4EDF-B051-D15C6CCB140B@xxxxxxxxxxxxxxxx
Hello Everyone.

I am trying to set a standard desktop background for certain users. I have
the part working....

What I can't see to get around is that I don't want this to happen to all
my users. Just to users how are visiting from a different branch office.
Do I need to use a WMI filter? If so, can anyone help me with Query
design?

Basically, I do not want the policy to apply if IP Address begins with
172.22. -- make sense?


No, I cannot really follow your statements.

If you want certain user policies to apply for a specific set of
user accounts but only when they are logging onto a particular
set of computers, then you would use a GPO set for loopback
processing. Such a GPO is linked so that the set of computers
is within its scope, and the security group filtering needs to be
such that only those computers and only the users you desire to
impact have read/apply of the GPO.
Search on GPO loopback

Roger


.



Relevant Pages

  • Re: Applying user object policy (filtering based on computer location)
    ... The security group filtering of the loopback GPO must also ... the computers in NY Desktops OU, ...
    (microsoft.public.win2000.group_policy)
  • Re: Active Directory Folders
    ... >> I'm certainly not going to discount a book published by Microsoft ... >> replace the computers and users containers created by default and ... Passowords can only be set in a GPO at the ... Laptops ...
    (microsoft.public.windows.server.active_directory)
  • Re: GPO Problems
    ... The computer configuration part belongs to computers and the user configuration part to the user, so depending on the settings you must have the accounts located there. ... If rsop.msc or gpresult /v logged on with a user account doesn't give any output there can be additional problems with GPO applying belomging to DNS confgiruration or slow links between sites. ... Only the password policy an account lockout policy have to bet set on ...
    (microsoft.public.windows.server.active_directory)
  • Re: Group policy to apply only to some workstations
    ... Gregg Hill wrote: ... the GPMC and clicked on SBSComputers, and there are no GPOs linked. ... I guess the next question would be "Why do the computers even need ... GPO) settings from applying to select computers? ...
    (microsoft.public.windows.server.sbs)
  • Re: Group policy to apply only to some workstations
    ... Inheritance" tab under SBSComputers, it shows a bunch of linked GPOs. ... settting to only select computers or block some standard SBS (domain GPO) ...
    (microsoft.public.windows.server.sbs)