Re: user have multiple PCs
- From: "Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxx>
- Date: Tue, 1 Nov 2005 10:47:53 -0600
Groups of computers should work though I recommend using global groups. When
changing group membership of a computer note that you need to reboot the
computer for it to update it's membership. Running gpresult on a computer
will show it's group membership. --- Steve
"Nick" <nt32msngns@xxxxxxxxxxxxx> wrote in message
news:1DDA17BD-EB61-4C8F-BD2B-B94F8F0B88F9@xxxxxxxxxxxxxxxx
>I did notice after more testing that I can add a group of users and I must
> add the comptuers as well. Once I add TermSrv1 TermSrv2 etc... to the
> Security Filtering then it works. Do you know if I can add a group of
> computers to it as well instead of just individual computers? I tried a
> universal group but that did not work. I was thinking of maybe a domain
> local to see if that would help... Just thought I would check
>
> "Steven L Umbach" wrote:
>
>> I have never tried that but I know another user tried the same thing a
>> while
>> back and never got it to work the way he wanted. I think the best way to
>> go
>> is to have one GPO linked to the OU where the TS is located and then if
>> you
>> do not want it to apply to tech support then give tech support deny
>> permission for that GPO. The only other thing I can think of trying is
>> to
>> try changing the order of the GPOs in the list for the OU and configure
>> the
>> bottom one as replace and the top one as merge. --- Steve
>>
>>
>> "Nick" <nt32msngns@xxxxxxxxxxxxx> wrote in message
>> news:58EF9E32-267F-40DA-B8E3-7AADC835A22B@xxxxxxxxxxxxxxxx
>> >I tried it and it works...however is there a way to apply differnt GPOs
>> >based
>> > on a specific user or group when using loopback? If I have
>> > Authenticated
>> > Users in my security filter, then my GPO settings get applied to all
>> > users.
>> > I tried to place multiple GPOs using loopback into my terminal server
>> > OU
>> > and
>> > change the security so that one applies to tech support and the other
>> > applies
>> > to standard users then the settings do not get applied when a user logs
>> > in.
>> > I first thought that this could be an inheritance issue, but removing
>> > all
>> > GPOs but one and changing the security to apply to only tech support,
>> > the
>> > settings do not get applied. Is this be design or I am mis-configuring
>> > something?
>> >
>> > "Steven L Umbach" wrote:
>> >
>> >> You want to use loopback processing of Group Policy and enable it on
>> >> the
>> >> OU
>> >> where the TS is located. Then configure GP settings for the GPO linked
>> >> to
>> >> the OU where the TS is to have the settings you want for users that
>> >> logon
>> >> to
>> >> the TS using merge or replace mode. Read the articles in the links
>> >> below
>> >> for
>> >> more details. --- Steve
>> >>
>> >> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/abe2b1a9-975f-4b2f-b771-9e6a903e97db.mspx
>> >> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/DepKit/33a8ff54-151a-47b7-a6c3-92aab07c2d13.mspx
>> >> http://support.microsoft.com/default.aspx?scid=kb;en-us;231287
>> >>
>> >> "Nick" <nt32msngns@xxxxxxxxxxxxx> wrote in message
>> >> news:67074004-D236-4499-A00F-D20811C8BB4F@xxxxxxxxxxxxxxxx
>> >> > On my network I have many users that have a laptop and also sign
>> >> > into
>> >> > Terminal Services on that laptop. I need to write a GPO for these
>> >> > computers
>> >> > but they should have less restiction then what the terminal servers
>> >> > have.
>> >> > Most of the settings are in the user configuration. My question is
>> >> > that
>> >> > can
>> >> > I have 2 GPOs in my OU and have them run based on where the user
>> >> > logs
>> >> > in?
>> >> > Where is the best place to put these GPOs? If I add one to my
>> >> > Terminal
>> >> > Services OU can the User Configuration take place or does the user
>> >> > have
>> >> > to
>> >> > be
>> >> > present in the OU for that to happen? I see that I can set the
>> >> > Security
>> >> > Filtering and it corresponds to computers, users, and groups. If I
>> >> > limit
>> >> > a
>> >> > policy by computer will the User Configuration still take place but
>> >> > be
>> >> > different based on the computer they log into?
>> >>
>> >>
>> >>
>>
>>
>>
.
- Follow-Ups:
- Re: user have multiple PCs
- From: Nick
- Re: user have multiple PCs
- References:
- Re: user have multiple PCs
- From: Steven L Umbach
- Re: user have multiple PCs
- From: Nick
- Re: user have multiple PCs
- Prev by Date: Re: Deploying Group Policy Settings in Windows NT 4 Domain - Registry vs. ADM vs POL Files
- Next by Date: Re: password policy
- Previous by thread: Re: user have multiple PCs
- Next by thread: Re: user have multiple PCs
- Index(es):
Relevant Pages
|
