Re: GPOs Restricted groups

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: "Patty Calcaterra" <red@xxxxxxxxxxx>
Date: 5 Aug 2005 10:46:01 -0700

Huckster, assuming you used the Restricted Groups setting in the GPO,
this is by design....meaning, you specify who should be in the groups
on the workstations and anyone who isn't specified in the GPO is
stripped.

The only other thing I can recommend is using a VBScript that does
this.

This script can be modified to run for W2K3...changing the WINNT:// to
LDAP and using the fully distinguished LDAP name...

http://cwashington.netreach.net/depo/view.asp?Index=489&ScriptType=command

Regards,

Patty

.

Follow-Ups:
- Re: GPOs Restricted groups
  - From: Hutch

References:
- GPOs Restricted groups
  - From: huckster

Prev by Date: Re: ADAM - SSO and provisioning considerations
Next by Date: Re: Upgrading my domain to Windows 2003
Previous by thread: GPOs Restricted groups
Next by thread: Re: GPOs Restricted groups
Index(es):
- Date
- Thread

Relevant Pages

Re: Apply User Settings only when using specific Computers
... on to specific computers within our organization. ... How do I specify in the GPO to apply the script to all users who only ... one links the loopback GPO to the OU ...
(microsoft.public.windows.group_policy)
Re: how can determine what gpo applied to a comp and who made the chan
... You didn't specify what operating system you use. ... If you are running Windows ... RSOP is Resultant Set of Policy. ... I know that you can determine that a GPO has been apllied ...
(microsoft.public.security)
Re: Deny users in an OU ability to log on locally to Domain machines
... Place the users in a group and define a computer based GPO to deny logon ... Have in mind that you nead to specify *all* users/groups which shall be ... This also includes local accounts (guest etc). ...
(microsoft.public.windows.group_policy)
Re: Active Directory Policy
... one is to replace the current group membership with whatever you ... what you specify in the GPO. ... >>the local administrators group. ...
(microsoft.public.win2000.active_directory)