Re: GPOs at Site level

From: Herb Martin (news_at_LearnQuick.com)
Date: 01/23/05 

Date: Sun, 23 Jan 2005 01:57:28 -0600

It's reliable. It's not perfect.

Anything that stops authentication or managing to
download the GPO will interfere (permissions etc.)

"Numpty" <Numpty@discussions.microsoft.com> wrote in message
news:1662E140-E2EC-4ECB-A14C-4950A5D0140F@microsoft.com...
> Additionally, the proxy settings I apply through group policy are located
in
> the User Configuration side of the policy object.
>
> Would I need to enable loopback processing to reapply the policy after the
> user has logged on for this to work?

No, the User section is still applied to the User even if
it comes from the site. (But the question does make sense.)

You would only need Loopback if you wanted the
GPOs of the machines Domain or OUs to be applied
to the user (who lived in another OU or Domain.) 

-- 
Herb Martin
>
> "Herb Martin" wrote:
>
> > "Numpty" <Numpty@discussions.microsoft.com> wrote in message
> > news:DC09AD7B-74AF-4BED-8E4D-2C00FCE117FB@microsoft.com...
> > > G'day everyone,
> > > I know that Group Policy can be linked to a Site as opposed to an OU.
> > >
> > > I'm looking for feedback on other peoples experiences with applying
> > settings
> > > to Sites (subnets.)
> > >
> > > Why would I want to do this?
> >
> > For something that you wish to affect because of
> > WHERE the machine is when it boots -- or the user.
> > As opposed to which Domain or OU it exists within.
> >
> > Some examples (some are better than others):
> >
> >         Software Install packages from a NEARBY server
> >                 (assuming the machines get the same software,
> >                 it is better to get it from a server IN that site.)
> >
> >         Logon Legal messages that are specific to the laws
> >             of a specific location -- state or country
> >
> >
> > > We have multiple sites in our organisation, with each site have their
own
> > > subnet etc.
> > > Each site then has their own proxy server, DNS suffix, Support staff
> > > (administrators)
> >
> >     Maybe such proxy settings -- the nearby one that can
> >         actually get the client out of the site to the Internet
> >
> > > Many of our users are laptop users and tend to move between sites and
each
> > > time they do this we need to either move their computer & user account
> > into
> > > the OU for that region.... This can be a hassle because it involves
human
> > > interaction, which as we all know leaves us open to human error = more
> > work.
> >
> >         OU's should be more about WHO they are,
> >             what "organization, department, working group,
> >             activity" the users or machines perform.
> >
> >         Site should be about PHYSICAL location on the net.
> >
> > > My theory is that if a user plugs their laptop in in LA, they will
receive
> > a
> > > DHCP Lease from the LA server, prior to logon. So the laptop will
> > > automatically become associated with the LA site, and receive the
policy
> > > appropriate to it. This would simplify administration and
troubleshooting
> > ten
> > > fold, and when this was mentioned to a colleague he became like Mr
Smiles
> > in
> > > the MCSE exams, and wanted to know more about it and was very keen to
see
> > if
> > > we could get it working.
> >
> >
> > > So what are your experiences with it, and is my understanding correct?
> >
> > Yes.
> >
> >
> >

Relevant Pages

  • RE: Wireless Connection to SBS Domain using WPA and DHCP
    ... the GPO to TKIP from AES. ... Then try wireless. ... My wireless laptop does not connect to the domain mainly because it doesn't ... using WPA-AES channel 11, GPO computer policy, and I ...
    (microsoft.public.windows.server.sbs)
  • Re: GPOs at Site level
    ... the proxy settings I apply through group policy are located in ... the User Configuration side of the policy object. ... >> I know that Group Policy can be linked to a Site as opposed to an OU. ... >> Many of our users are laptop users and tend to move between sites and each ...
    (microsoft.public.windows.server.active_directory)
  • Re: GPO only working on 1 TS?!
    ... Did you enable loopback policy on the TS GPO? ... done a gpupdate and ran rsop.msc which shows the proxy settings that I ... My test user has no other GPO's applied to it. ...
    (microsoft.public.windows.server.active_directory)
  • Re: IE Maintenance Group Policy Settings Issue
    ... IE Policy Settings don't work in the same fashion as those found in the ... specifically changed the proxy settings to the desired configuration. ... I then created a GPO called "Proxy Server Settings" on this ...
    (microsoft.public.win2000.group_policy)
  • Re: Client Proxy Settings In GP?
    ... I would check to see if policy is being applied to the user (assuming ... proxy settings are being set and which gpo is setting it) ... Prev by Date: ...
    (microsoft.public.windows.group_policy)
Loading