Re: Which Settings MUST be assigned to a User?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Not sure if I understand your question properly, so if this is not helpful, please just ignore it.

Group Policy Management Editor, the settings in the User Configuration part (lower half) get applied to user accounts.

Those in the Computer Configuration part (upper half) get applied to computer accounts.

The only exception is that if the "User Group Policy loopback processing mode" setting is enabled, the settings in the User Configuration part get applied to user accounts when the user logs on at a computer to which the GPO, with User Configuration settings in it, is applied.

I'm not familiar with RIS (I assume you mean Remote Installation Services), but I can't find any GPO settings relating to RIS. If you describe where these settings are to be found it would be useful.

--
Bruce Sanderson
http://members.shaw.ca/bsanders

It is perfectly useless to know the right answer to the wrong question.



"Gerrit Deike" <GerritDeike@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:95F6DF52-13A4-4056-B415-31E515B424C7@xxxxxxxxxxxxxxxx
Hello Meinolf,

though I agree as far as the administrative chaos goes, I have no choice in
this matter as that is how the customer is setup. (To make things worse the
accounts domain is being administerd by T-Systems and not by the customer
himself...)

That is why I want to know which settings only make sense when applied to
user accounts.

Btw. the RIS settings MUST be applied to the user account if your planning
on using different settings on a per user basis, which is the typical
sitiuation. Otherwise you have to apply the settings to the RIS-server,
because that is the computer on which the user is loging on to!

Cheers,

Gerrit Deike
MCT, MCITP: Exchange, MCTS: Exchange, MCSE: Messaging, MCSA: Messaging,
Small Business Specialist
"Meinolf Weber [MVP-DS]" wrote:

Hello Gerrit,

If the computer is in the resource forest RIS has to be setup there, nothing
to do with the user during RIS installation. RIS does not belong to users.

GPO's for the user you have to configure in the forest where the user belongs
to. Policies depends on your requirements.

I can not really understand why you split users and computer with a trust.
You have additional work, because computer policies has to be configured
in the domain where the users are and the user policies in the other one.

IMHO you create yourself an administrative chaos.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello Meinolf,
>
> the two forrests are connected via forrest-trust. The user accounts
> are in the account forrest but the computer accounts are in the
> resource forrest.
>
> What I need is a list of all GPO-settings that must be assigned to a
> user account so that they will work.
>
> The RIS-settings are an example. They will not work when assigned to a
> computer account because there is no OS on the client and (usually) we
> want to use these settings to differ between users. Are there any more
> such settings that only make sense or can only be applied to user
> accounts?
>
> Cheers,
>
> Gerrit
>
> "Meinolf Weber [MVP-DS]" wrote:
>
>> Hello Gerrit,
>>
>> Please dsecribe more detailed the different forests, also how are
>> they connected, with trust? A user account belongs to one domain not
>> to different forests.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hi!
>>>
>>> Does anybody know which settings must be applied to a user-account
>>> so that they will work? (f. i. RIS-settings)
>>>
>>> I'm in a project where the customer has a account-forrest and a
>>> ressource-forrest and I want to make sure that I don't miss any of
>>> the settings!
>>>
>>> Thanks!
>>>
>>> Gerrit
>>>




.

Relevant Pages

  • Re: User Login
    ... The setting I'm referring to in item #1 is a Computer Configuration setting, so applying a GPO with this setting to an OU that only has User Accounts in it will have no affect whatsoever. ... The GPO must be applied to an OU that has Computer Accounts in it to be any use. ... If you want to, you can specify the user accounts in the GPO setting (Computer Configuration, Windows Settings, Security Settings, Local Policies, User Rights Assignment Deny log on locally), but I suspect it will be easier in the long run to specify a group name here and put the e-mail only user accounts into that group. ... the domain group called Domain Users is a member of the local Users group on all computers; this is usually why any domain user can logon at any domin member computer. ...
    (microsoft.public.windows.server.active_directory)
  • Re: restrict access to AD:USER properties for a particular set of
    ... The settings that you define at the OU permission level ... to advanced security settings, selct add, select Jane Doe and then ther ... You can choose user accounts, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Startup user selection vs small-fill-in-the-blank
    ... back to the XP default showing the users (with a silly icon). ... I was messing with settings to get sharing working within my subnet and inadvertantly got the settings stuck with the rectangle wherein I must fill in my user name. ... To specify that users log on to the computer using the Welcome screen, select the Use the Welcome screen check box. ... To open User Accounts, click Start, click Control Panel, and then click User Accounts. ...
    (microsoft.public.windowsxp.general)
  • Re: Files and Settings Wizard
    ... MVP Windows - Shell / User ... I used the files and settings wizard ... > ran the Files and Settings Wizard (location, browse to D - I didnt ... none of the user accounts have their old settings. ...
    (microsoft.public.windowsxp.help_and_support)
  • Files and Settings Wizard
    ... I reinstalled all the software i wanted, then ran the Files and Settings ... Wizard (location, browse to D - I didnt quite know where the files were, so I ... none of the user accounts have their old settings. ...
    (microsoft.public.windowsxp.help_and_support)