Re: Which Settings MUST be assigned to a User?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hello Gerrit,

If the computer is in the resource forest RIS has to be setup there, nothing to do with the user during RIS installation. RIS does not belong to users.

GPO's for the user you have to configure in the forest where the user belongs to. Policies depends on your requirements.

I can not really understand why you split users and computer with a trust. You have additional work, because computer policies has to be configured in the domain where the users are and the user policies in the other one.

IMHO you create yourself an administrative chaos.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Hello Meinolf,

the two forrests are connected via forrest-trust. The user accounts
are in the account forrest but the computer accounts are in the
resource forrest.

What I need is a list of all GPO-settings that must be assigned to a
user account so that they will work.

The RIS-settings are an example. They will not work when assigned to a
computer account because there is no OS on the client and (usually) we
want to use these settings to differ between users. Are there any more
such settings that only make sense or can only be applied to user
accounts?

Cheers,

Gerrit

"Meinolf Weber [MVP-DS]" wrote:

Hello Gerrit,

Please dsecribe more detailed the different forests, also how are
they connected, with trust? A user account belongs to one domain not
to different forests.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
Hi!

Does anybody know which settings must be applied to a user-account
so that they will work? (f. i. RIS-settings)

I'm in a project where the customer has a account-forrest and a
ressource-forrest and I want to make sure that I don't miss any of
the settings!

Thanks!

Gerrit



.

Relevant Pages

  • Re: SMS Across 2 Forests
    ... I will now need> to place a primary site server with default MP in my other forest. ... Will I> be ok with one SLP in my central site even though it exist in the other> forest? ... >>> - What kind of user account do I need to specify for the address ... >>> in both forests and used that as my client push installation account. ...
    (microsoft.public.sms.setup)
  • RE: RIS Build - Access is denied
    ... Allow a user or group to create a RIS managed computer account in the domain ... Planning Security for RIS Administrative Tasks ... was a member of domain admins (other than re-adding the ris build account ... | If I then remove the computer object from AD it builds fine. ...
    (microsoft.public.windows.server.general)
  • Re: Cannot Move Mailboxes - RESOLVED
    ... the E2K3 box ir perhaps it's account in AD was corrupt. ... re-running forest prep and domain prep and re-joining ... adds the Exchange security principles to the AD domain, ...
    (microsoft.public.exchange.admin)
  • RIS Build - Access is denied
    ... I have been using RIS successfully for some time. ... Initially I set up the ris build account that I was using to deploy the ris ... images to be a member of the domain admins security group. ... If I then remove the computer object from AD it builds fine. ...
    (microsoft.public.windows.server.general)
  • Re: Trust iand different forests
    ... When creating an external trust between a win2003 forest and a win2000 ... Express or any other newsreader), and configure a news account, pointing ... This is a direct link to the Microsoft Public ...
    (microsoft.public.win2000.active_directory)