Re: Applying Policy on certain computers only

Tech-Archive recommends: Speed Up your PC by fixing your registry

Yes, and Yes!

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
Check out http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Whitepapers and Utilities for all things Group Policy-related
And, the Windows Group Policy Guide is out from Microsoft Press!!! Check it
out at http://www.microsoft.com/mspress/books/8763.asp
GPOGUY Blog: http://blogs.dirteam.com/blogs/gpoguy



"Saucer Man" <SaucerMan@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:6B9292A1-E514-40F6-8383-4E1D5E2534C6@xxxxxxxxxxxxxxxx
> Ok. So if I enable loopback with "replace" mode, the thin clients will
> take
> on the user settings in the GPO? And I should place the computer object
> in
> the COWS OU? Thanks for your help.
>
> Rich
>
> "Darren Mar-Elia (MVP)" wrote:
>
>> Yes. Creat a GPO linked to the COWS OU. Within it, enable that loopback
>> setting on the computer configuration side and then set the user
>> configuration settings you want for the users logging onto machines in
>> that
>> OU within the user configuration side. You can also create other GPOs
>> linked
>> to that OU that effect user configurations. If you choose replace mode,
>> then
>> the user's "native" user settings will be ignored in favor of the ones
>> that
>> fall under the COWS OU. If you choose merge, then both the user's native
>> settings and the computer's user settings will be applied, with the
>> computer's user settings taking precedence. I recommend using replace
>> unless
>> you really need to merge settings, because merge creates other problems.
>>
>> --
>> Darren Mar-Elia
>> MS-MVP-Windows Server--Group Policy
>> Check out http://www.gpoguy.com -- The Windows Group Policy Information
>> Hub:
>> FAQs, Whitepapers and Utilities for all things Group Policy-related
>> And, the Windows Group Policy Guide is out from Microsoft Press!!! Check
>> it
>> out at http://www.microsoft.com/mspress/books/8763.asp
>> GPOGUY Blog: http://blogs.dirteam.com/blogs/gpoguy
>>
>>
>>
>> "Saucer Man" <SaucerMan@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:55A1A45E-9873-41F5-A380-B8EB2D4E4548@xxxxxxxxxxxxxxxx
>> >I see this but I am confused. How would I set this up to work properly?
>> >I
>> > have an OU called COWS. This is where all the computers are that I
>> > want
>> > my
>> > policy to affect. I want the policy to apply to "Authenicated User" or
>> > "Domain Users" so I will
>> > filter the policy to one of those groups. Do I LINK the policy to the
>> > COWS
>> > OU?
>> >
>> > "Darren Mar-Elia (MVP)" wrote:
>> >
>> >> You would use something called Loopback Policy. Check out
>> >> http://support.microsoft.com/kb/231287/en-us and let us know if you
>> >> have
>> >> any
>> >> questions.
>> >>
>> >>
>> >> --
>> >> Darren Mar-Elia
>> >> MS-MVP-Windows Server--Group Policy
>> >> Check out http://www.gpoguy.com -- The Windows Group Policy
>> >> Information
>> >> Hub:
>> >> FAQs, Whitepapers and Utilities for all things Group Policy-related
>> >> And, the Windows Group Policy Guide is out from Microsoft Press!!!
>> >> Check
>> >> it
>> >> out at http://www.microsoft.com/mspress/books/8763.asp
>> >> GPOGUY Blog: http://blogs.dirteam.com/blogs/gpoguy
>> >>
>> >>
>> >>
>> >> "Saucer Man" <SaucerMan@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> >> news:AF0167F5-8B35-4526-8325-DBEF75BDE8A8@xxxxxxxxxxxxxxxx
>> >> >I have a GPO with user configuration only. I want this to be applied
>> >> >to
>> >> > certain PCs only. I want Autenticated Users to get the policy only
>> >> > if
>> >> > they
>> >> > sign-on to our thin clients. When they log on to our regular
>> >> > desktops,
>> >> > the
>> >> > policy should not be applied. How can I achieve this?
>> >>
>> >>
>> >>
>>
>>
>>


.

Relevant Pages

  • RE: Several Problems; how to reset security and troubleshoot serve
    ... On the SBS security settings; I accept your response, ... On the Remote Assistance Issue I have check all of the settings as you ... What started me on the path of security problem was I had a simular problem ... Start the Microsoft Management Console Group Policy snap-in. ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO Policy wont apply.
    ... > The Computer Configuration portion of a Group Policy Object will apply to ... > The User Configuration portion of a Group Policy Object will apply to any ... > user accounts in that OU. ... > settings - one for the computer account and one for the user account. ...
    (microsoft.public.win2000.active_directory)
  • Re: Using Group Policies on Standalone XP Pro
    ... By far your best option is to use the Shared Computer Toolkit from Microsoft ... users/groups you do NOT want the Group Policy user configuration settings to ...
    (microsoft.public.windowsxp.security_admin)
  • Re: GPO Policy wont apply.
    ... The Computer Configuration portion of a Group Policy Object will apply to ... any computer accounts in that OU. ... User Configuration and computer accounts (with the exception of loop back ... nor will any User Configuration settings in a GPO tied to the ...
    (microsoft.public.win2000.active_directory)
  • Re: iNTERACTIVE LOGON welcome screen - make it go away
    ... I created a custom ADM file for these two settings ... and imported it into the GPO under the Computer Administritative templates. ... really great expertise in Group Policy often reply to posts including ... doing a gpupdate on that domain controller which ideally would be the ...
    (microsoft.public.windowsxp.security_admin)