Re: Filtering on a Security Group to Apply a Group policy



Yes, I am out of the box Active Directory administrator and I work in a
unique environment where our development team has so entwined Active
Directory into their applications that anything I do is more serious to break
things than their doing things. This is the design. So, instead of creating
an OU - I need to use the already created OU's to attach a new Group Policy
to and make sure the Group Policy is only applied though to certain computers
in this OU. And I do this by creating a security group and adding the pc's
to that security group that I want to apply a small script to that it won't
affect other parts of the OU objects?
tina

"Marcin" wrote:

Tina - refer to http://technet.microsoft.com/en-us/library/cc728301.aspx
Keep in mind that, regardless of security filtering, GPOs are linked to
containers in AD hierarchy (sites, domains, OUs) - not to groups...

hth
Marcin

"TeeCee" <TeeCee@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1DA34503-7EDA-44B5-A9AB-3A93B7D62009@xxxxxxxxxxxxxxxx
Instead of applying a Group Policy to an OU, what is the proper way to
apply
it to just a security group of users or computers to ensure the policy is
no
applied to any other computer or user. If you have a good article. I am
reading about how to apply but does it really work without affecting other
computers or users? This is because moving users or computers in and out
of a
specific OU that has policy's attached to it causes custom applications to
break that are tied into Active Directory.

tina



.



Relevant Pages

  • Re: Clients wont find their security groups etc.
    ... The problem computers were joining the WLAN when they were already logged on ... and not picking up the security group additions. ... Putting users into security groups has nothing to do with Group Policy ...
    (microsoft.public.windows.group_policy)
  • Re: sbs2003 and gpo and security groups.
    ... Open the Group Policy Management Console. ... Remember that if you have User settings, you need a security group ... you need one containing computers. ...
    (microsoft.public.windows.server.sbs)
  • RE: Problem with Q320065 in 2003AD
    ... computers from your workstation, you have to be on the DC to get the local ... Our goal is to add all domain admins to all machines, ... You are returned to the group policy ... > only location that is available is the active directory mycompany.net. ...
    (microsoft.public.windows.group_policy)
  • Re: Normal user can open Active Directory Users and Computers?
    ... >>So does it disturb anyone else that a normal user on your domain can ... >>open Active Directory Users and Computers and get any information they ... >>up other programs that depend on Active Directory? ... have group policy restrictions placed on them. ...
    (microsoft.public.win2000.active_directory)
  • Active Directory users and computers
    ... Im having trouble with the Active directory. ... shows no computers what so ever on the domain. ... "Group Policy Error" ... (Failed to open the Group Policy Object. ...
    (microsoft.public.backoffice.smallbiz2000)