Re: Complex GPO Configuration Issue
- From: "Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxx>
- Date: Tue, 4 Oct 2005 23:07:04 -0500
Loopback processing is best used at the OU level where you have only one GPO
configured enabling loopback processing and then configured with the user
configuration settings applied to users when they logon to those computers.
If you want different user configuration settings applied for another group
of computers then create another OU for those computers. --- Steve
"James Miller" <JamesMiller@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F0131426-C34A-45C5-B3BB-BC9ADD76EC7B@xxxxxxxxxxxxxxxx
>
> I am trying to create two policies that set user configuration on
> computer objects in our domain using loopback processing. One policy
> should
> be the default, and the handful of exception machines should use the
> second
> policy. Both policies are defined at the OU level, with the default set
> to
> take precedence.
> We have a group with deny rights to the default GPO object that
> contains machine accounts for all our exception machines. In theory,
> because
> they are denied access to the policy we want as default, they should
> effectively have the second policy settings applied.
> What our experience has been is that when a machine is placed into the
> group and denied access to our default policy, only the computer
> configuration settings from the second policy are applied. So the
> loopback
> setting in this policy shows that it is enabled, however none of the user
> configuration settings from that policy make it to the client.
> Modeling in the GPMC shows the default policy in the denied list as
> expected, and shows the second policy as being applied. It also shows the
> loopback setting, but none of the user configuration settings - it's
> accurately describing what my clients are experiencing. Is this behavior
> by
> design? What can I do to make this work the way I think it should?
> --
> _________________________
> JC Miller
> Distributed Technology Analyst
> Boise, ID
.
- Prev by Date: Re: Complex GPO Configuration Issue
- Next by Date: Re: Complex GPO Configuration Issue
- Previous by thread: Re: Complex GPO Configuration Issue
- Next by thread: Re: Restricted Policy [WILDPACKET]
- Index(es):
Relevant Pages
|
