Re: Difference between Computer and User confiiguration

Thank you. From the description of loopback it is exactly what I want. We
have classrooms for toddlers where teachers log in and let the toddlers use
the machine. When the 15 minute lock comes on, it is frustrating if another
teacher is in the room and cannot unlock it. But, if they are outside of the
classroom, I want the computer to lock as it does for everyone else.

Thank you very much!

"Darren Mar-Elia" wrote:

Thomas-
User policy only applies to user accounts, and if the GPO is linked to an OU
that only contains computers, then any user policy settings in that GPO are
ignored....UNLESS...you enable loopback processing on those computers.
Loopback is a lengthy topic--I suggest starting here:
http://support.microsoft.com/kb/231287/en-us

Darren

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related
Group Policy Management solutions at http://www.sdmsoftware.com




"Thomas Dewar" <ThomasDewar@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:81D18C59-1D26-4070-9078-CA765783F5DE@xxxxxxxxxxxxxxxx
I am having difficuly with this and am not sure if I am doing something
wrong.
Currently, we have a user policy on our user OU to password protect our
desktops after 15 minutes.

I am now discovering that it on some machines, we do not want that to be
the
case, but this is particular to the machine, not the user. So, I created a
policy attached to our desktop PC OU to disable password protecting the
desktops.
No matter what I did, the user policy took effect and not this policy on
the
PC OU.

Then I tried only doing it by PC. I set the policy for users to be not
configured and added the policy on one PC OU to lock after 15 minutes and
another to have lock disabled. This resulted in everyone getting a policy
of
not configured.

Am I doing something wrong? Is it not possible to apply a policy that
falls
under user configuration to a machine OU? Any help would be appreciated.
Thanks
Tom



"David" wrote:

I agree now. I also read the microsoft documents. There's a sequence
how
policies are applied.

"Raghuramji" wrote:

Sorry David,

Steven is correct. Computer configuration will take precedence when
there is a conflict.

Raghuramji C
www.desktopcentral.com

David wrote:
thanks both for the answers! I think it's best for me to use the
result set
to confirm what is really applied. GPO has been a headahe for me...

"Steven L Umbach" wrote:

That is contrary to Microsoft documentation I have seen. Even
though user
configuration is applied last the operating system still can give
computer
configuration settings higher precedence. As always the admin
should test
any scenario to make sure he is getting the desired results.

Steve


"Raghuramji" <raghuramji@xxxxxxxxx> wrote in message
news:1153392789.160203.295720@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi David,

In my understanding, the configuration which is executed last
will take
effect. So the User Configuration will take precedence.

Raghuramji
www.desktopcentral.com
http://demo.desktopcentral.com

Steven L Umbach wrote:
Usually the computer configuration setting will prevail if both
are
configured and the user is logging onto a computer that also has
the
computer configuration applied. Also be sure to read the full
explanation
of
any such setting as often there is helpful information on what
to expect
or
what you need to do in such cases and some will say both need to
be
configured such as for some of the options for Windows Installer
as an
example.

Steve

.
"David" <David@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:6CADEC7C-736C-42D2-9010-7C16DDC3DFFE@xxxxxxxxxxxxxxxx
Some options under Computer configuration and User
configuration are
the
same. May I know what the differences are and which take
precedence?
Thank
you.

-David







.

Relevant Pages

  • Re: Complex GPO Configuration Issue
    ... I have read a lot of posts and articles on loopback processing and have used ... If you enforce a policy then it will override all other polices in the path ... to the user/computer unless another GPO closer to the user/computer is also ... What I'm getting for user configuration is ...
    (microsoft.public.windows.group_policy)
  • Re: Complex GPO Configuration Issue
    ... > I have read a lot of posts and articles on loopback processing and have used ... > If you enforce a policy then it will override all other polices in the path ... > to the user/computer unless another GPO closer to the user/computer is also ... What I'm getting for user configuration is ...
    (microsoft.public.windows.group_policy)
  • Re: GPO problems
    ... If policy loopback is set in the Computer Configuration of a GPO ... The computer configuration settings from this list are applied to the ...
    (microsoft.public.windows.group_policy)
  • Re: Do Not Execute Group Policy for Admins Group
    ... The intent of policy loopback is to replace or merge user configuration ... The computer configuration settings from this list are applied to the ... > so that the group policy will only apply to a certain group of users ...
    (microsoft.public.win2000.group_policy)
  • Re: More than one GPO on the same OU
    ... How does the Group Policy 'No Override' and 'Block Inheritance' work? ... NO OVERRIDE option of a GPO ... > COMPUTER CONFIGURATION ... [Christoffer Andersson] ...
    (microsoft.public.win2000.group_policy)