Re: Best way to apply policy to all computers except servers

Barkley Bees schrieb:
We have our OU structure setup as follows (simplified):

MAIN OU (Contains our client PC's and users)
--- SERVERS OU (Servers only under the Main OU)

IMHO, the easiest way to handle it:
MAIN OU
- Link all GPOs that are for both kind of computers
--- SERVERS OU
- link only GPOs with server settings
--- WORKSTATIONS OU
- link only GPOs with special client settings

Mark
--
Mark Heitbrink - MVP Windows Server - Group Policy

Homepage: www.gruppenrichtlinien.de - deutsch
Discuss : www.freelists.org/list/gpupdate
.

Relevant Pages

  • 1058 and 1030 errors revisited
    ... tried to run the gpofix utility I got a "network path not ... There are about sixty client ... whereas the servers all have two gigabit ... We printed out our old w2k GPOs and used these to ...
    (microsoft.public.windows.group_policy)
  • RE: Group membership / Kerberos tickets
    ... Have you tried using Kerbtray or another utility to purge the servers' ... or you have to reboot the servers. ... > and thus they are receiving and applying these GPOs. ... > its TGT at startup, and the TGT contains SIDs for groups to ...
    (Focus-Microsoft)
  • RE: Group membership / Kerberos tickets
    ... Have you tried using Kerbtray or another utility to purge the servers' ... or you have to reboot the servers. ... > and thus they are receiving and applying these GPOs. ... > its TGT at startup, and the TGT contains SIDs for groups to ...
    (Focus-Microsoft)
  • Re: Services disabled by itself
    ... If it is coming from AD based group policy, ... If you can rule out GPOs doing this through policy then you are ... It happened anytime of the ... Are these servers in a domain ?? ...
    (microsoft.public.windows.server.security)
  • Question regarding Group Policy setup
    ... I am currently in the process of planning out our deployment of WSUS and I'm interested in getting some input on how to configure the GPOs for it. ... We have 5 sites, each of which has a Domain Controller, and the servers will be on a different update schedule than the desktop machines. ... have to create 5 separate GPOs specifically for the servers and 5 different ones for the workstations? ...
    (microsoft.public.windows.server.active_directory)
Loading