Re: How to create "kiosk" PC using a GPO?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hi

Are you saying that NO computer account based GPO's apply or just some of
them?

If its ALL computer based GPO's I assume you have checked the computer
account exists in the domain/ou etc you are linking the policy to (or below,
with no other GPO overridin it?)

What happens if you set the policy and then run RSoP to see what it does, and
then maybe run gpresult and gupdate - check for switches to view the policies
as they are applied and to force policy refresh - you'll prob need to reboot
for the computer ones anyway

I have heard that loopback processing is applicable but I have never played
with it so it might be worth hitting the books on that if you aren't aware
(like me:-)

Have you checked if the computer has right permissions for the GPO to apply

HTH

Regards

S

Zigzag240 wrote:
>I want to create a GPO to lock-down a set of ?kiosk? PCs we have.
>
>- The GPO will affect all users who log onto those PCs.
>- The GPO will use ?User Configuration? Administrative Template settings
>such as desktop icon removal, start menu changes, etc, because the "Computer
>Configuration" templates don't provide the desktop restrictions we need.
>- I don't want to apply the GPO to a User though, otherwise it will follow
>them around the building to non-kiosk PCs.
>
>The problem: the GPO pnly works properly if I if I apply it to a User. If I
>apply it to just the Computer, the desktop settings don?t apply.
>
>I have tried Loopback in both Replace/Merge, importing security templates.
>But still the changes still only work when I apply the GPO to a user, not to
>a Computer.
>
>In a nutshell: I know that "User Configuration" settings are meant to apply
>to only Users. So how do I get ?User Configuration? desktop settings to apply
>to a Computer, regardless of who logs on? Thanks anyone............


--
Message posted via WinServerKB.com
http://www.winserverkb.com/Uwe/Forums.aspx/windows-server-ad/200508/1
.

Relevant Pages

  • How to create "kiosk" PC using a GPO?
    ... - The GPO will affect all users who log onto those PCs. ... apply it to just the Computer, the desktop settings don’t apply. ... I have tried Loopback in both Replace/Merge, importing security templates. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Deploying SP 4 through Group Policy
    ... Let's assume that we have verified that you current SP4 extraction is not ... all of the computer account objects that ... You are creating this GPO from scratch or are you linking an ... nothing happened then I would suggest that you reboot again. ...
    (microsoft.public.win2000.active_directory)
  • Re: Automatically adding computers to a group
    ... that makes no sense if the computer account is NOT recreated. ... This security group is used to filter ... Interesting concept, "run once GPO. ... computer a member of this new security group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Getting desperate: GPO applying incorrectly, PLEASE HELP ME!!
    ... > User and Computer settings a single GPO,. ... unless you have the workstation computer ... > User Configuration settings from GPOs that apply to the User's user ... > OU the computer account for the computer being logged on to is in. ...
    (microsoft.public.windows.group_policy)
  • Re: WSUS - Adding wuau.adm template???
    ... I find that using a GPO at the OU level that only covers client ... In Group Policy Object Editor, ... click Add/Remove Templates. ...
    (microsoft.public.windows.group_policy)