What does "No One" mean in a GPO Default setting?
- From: "Bill Bradley" <wdbradley3@xxxxxxxxxxx>
- Date: Thu, 16 Jun 2005 23:24:01 -0600
We recently implemented some User and Workstation GPO's that used settings
from Microsoft to limit certain things to certain Groups. Our tech who did
this followed the guidance (we thought), but, after we put them onto our
test network, we started seeing issues with the defined Groups and Users not
being resolvable. After checking we found some errors (such as
"Administrators" misspelled as Adminstrators), but, we also got a lot of
errors about "No One".
In checking, it seems that in many of the MS lists of security settings for
GPO's, while they usually use "Not Configured" as the Default, at times they
use "No One" as the default, and...our tech just put in that term, and,
since it's neither a Group or User, it came up unresolvable.
So...after spending hours online trying to find out what this means, and,
what I should use...I'm mystified!
What is meant when they use "No One", rather than "Not Configured" as the
default, and, what should I put in on those items?
Here's an example (URL is:
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sag_seconceptsunprivs.mspx)
Allows the user to add a computer to a specific domain. For the privilege to
be effective, it must be assigned to the user as part of the Default Domain
Controllers Policy for the domain. A user who has this privilege can add up
to 10 workstations to the domain.
Users can also be allowed to join a computer to a domain by giving them
Create Computer Objects permission for an organizational unit or for the
Computers container in Active Directory. Users who have the Create Computer
Objects permission can add an unlimited number of computers to the domain,
regardless of whether they have been assigned the Add workstations to a
domain privilege.
Default setting: No one
Thanks.
.
- Follow-Ups:
- Re: What does "No One" mean in a GPO Default setting?
- From: Bruce Sanderson
- Re: What does "No One" mean in a GPO Default setting?
- Prev by Date: Re: using folder redirection and offline files in multi site wan!
- Next by Date: WSUS settings in GPO
- Previous by thread: WSUS override of explicit disabled updates
- Next by thread: Re: What does "No One" mean in a GPO Default setting?
- Index(es):
Relevant Pages
|
