Re: How do I Block a GPO with User Policy, by Computer(s)

OK, slightly different now, as it is no matter who logs on.
Place those machines in an OU by themselves and link a
new GPO to this. Edit the GPO and set the user settings
that you want and in the Computer section locate the Group
Policy adm settings (under Adm templates / System) and
set it to do loopback processing in Merge mode (unless
you really do want to replace all User policy settings).
Leave the GPO at its defaults of applying to Authenticated
Users.
What happens is, via normal rules Computer section settings
get applied to computers in the OU. The loopback setting
tells it to also process the User policies section for Users
that are allowed by the "apply to" security. We left it at the
default, so it will apply to any user logging in. Since we
placed the computers in an OU and linked the GPO there,
only those computers will be affected. In earlier reply,
with two security groups, assumption was you wanted this
to happen for multiple computers that you could not gather
into an OU (hence the custom computers group) and for only
certain users logging into those machines (hence the custom
group for users). Now, with you wanting it to apply to all
users, it is hard to do this without collecting the machines
into an OU, since you could make the group of machines to
use in the security filtering but it would be hard to make the
group of all possible users, at least without including other
machines as Authenticated Users does.

Lea
"Justin" <Justin@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:FCA55948-BF70-4FED-A5A2-17CB8AE419DD@xxxxxxxxxxxxxxxx
Roger,

Can you give me some guidance on how i go about setting this up?

I am starting to get lost when it comes to how the loopback settings work.

Basically in the end here is what i want to accomplish:

I want to apply a GPO with User Configuration (Display Settings, Screen
Saver, etc) to a computer (or group of computers) no matter who logs in.


.

Relevant Pages

  • Re: Aftermath of RDIRCMP.EXE?
    ... There is a group of machines that need to be on the domain that have all the ... They don't want us to make changes to the default domain policy ... Then create the OU, and as Jorge suggested, link the GPO ... with its default settings, and the GPO you created at the OU will apply to ...
    (microsoft.public.windows.server.active_directory)
  • RE: Add trusted site to all computers
    ... I don't think the GPO will affect Windows 2000 computers. ... Add trusted site to all computers ... >settings not just the trusted site I was originally interested in adding. ...
    (microsoft.public.windows.server.sbs)
  • Re: cant override screen saver policy
    ... > Settings in the User Configuration part of a GPO always apply to User ... > users log on to specific computers, then enable Loopback processing in a GPO ... >> don't get this policy setting. ...
    (microsoft.public.win2000.group_policy)
  • Re: cant override screen saver policy
    ... Yes, I figured out that using loopback processing was the answer (Ok, I ... > Settings in the User Configuration part of a GPO always apply to User ... > users log on to specific computers, then enable Loopback processing in a GPO ...
    (microsoft.public.win2000.group_policy)
  • Re: cant override screen saver policy
    ... Settings in the User Configuration part of a GPO always apply to User ... Accounts, not Computer Accounts, so any User Configuration settings you want ... but only when a user logs on at the computers that GPO ...
    (microsoft.public.win2000.group_policy)
Loading