Re: GPO for servers only

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: TechMasters (kiosk_at_comcast.net)
Date: 02/08/05 

Date: Tue, 08 Feb 2005 17:51:13 -0500

Thanks, I want to use GPO filtering but is there any performance issue
assciated with GPO processing from having to do it this way?? (i.e
does a large group memebership enumerationf of the GPO filter slow
down its processin?)

On Tue, 8 Feb 2005 15:34:12 -0600, "Steven L Umbach"
<n9rou@nospam-comcast.net> wrote:

>You could either put the servers in an OU or use "filtering" so that the
>apply permissions for that GPO only applies to a global group you create and
>then put those servers computer accounts into that group. See the link below
>for the section on filtering Group Policy. --- Steve
>
>http://support.microsoft.com/default.aspx?scid=kb;en-us;322176
>
>"TechMasters" <kiosk@comcast.net> wrote in message
>news:me3i019ps0avertlubaskjchmfoimc3mm2@4ax.com...
>>
>> Hi,
>> I need to implement a GPO thru my entire domain (one only) which only
>> applies to servers thou, and not the workstations. Is this possible?
>> I would like the GPO to be set at the Domain level and apply to
>> servers only, not anything else....thanks!
>

Relevant Pages

  • Re: GPO for servers only
    ... The best way is to have the servers in an OU and apply the GPO to the OU. ... instead of deleting the accounts. ... I want to use GPO filtering but is there any performance issue ...
    (microsoft.public.windows.group_policy)
  • Re: Accessing Local Security Policy remotely
    ... Yes, you can edit the local security settings via a remote MMC, however as ... Chris has said, in almost all circumstances the domain, site and OU GPOs ... GPO Filtering: ...
    (microsoft.public.windows.server.active_directory)
  • Re: restricting logon rights to certain machines
    ... Create a GPO and link to the domain. ... necessary computers into this group. ... This is called GPO filtering. ...
    (microsoft.public.windows.server.active_directory)
  • Re: GPO for servers only
    ... The other option would add another GPO anyhow. ... I want to use GPO filtering but is there any performance issue ... > assciated with GPO processing from having to do it this way?? ... >>then put those servers computer accounts into that group. ...
    (microsoft.public.windows.group_policy)
  • Re: Windows 2008 Network Level Authentication
    ... temporarily block inheritance on all domain-wide GPOs on the OU ... Terminals Servers, properly licensed and set up in a round-robin ... Using either the local GPO and Disabling the Network Level ... Authentication turned completely off, and remain so. ...
    (microsoft.public.windows.terminal_services)