RE: Aftermath of REDIRCMP.EXE?



Hi Mygposts

Last question asnwered: the PC's currently in the computers OU will not
move, only new creastions will "redirectly" be created into the new custom
computers OU. They will remain unaffected as the Computers OU is unchanged,
only where they will be created after the command

If the Default Domain policy is set to ENFORCED, then a block on the new
computers OU will not work, remove the enforced from the DEF DOM POL and
block inheritence if need be, in short, and enforce policy will overide and
blocking policy
--
Garry Starck
MCITP, MCTS AD, MCSE 2003 Messaging, MCDBA


"Mygposts" wrote:

I meant "redircmp.exe," not "rdircmp.exe"


"Mygposts" wrote:

We are considering running this command so new machines will automatically go
into an ou with special policies if the tech forgets to precreate the
computer account in the correct OU.

However, we are concerned about side effects because we are using the
default Computers Container as a place to put machines that for whatever
reason need to be exempt from all Group Policies including the Default Domain
Policy.
We tried creating an OU and blocking group policy inheritance, but that does
not block the default domain policy, so we had to move the machines back into
the computers container.

What will happen to the machines that are being stored in the default
Computers Container after running the RDIRCMP.exe command?
.



Relevant Pages

  • Re: Reinstall everytime assigned applications through GPO on start
    ... Software installation extension has been called for background policy refresh ... Stations - R&D Software (EMEA computers). ... Stations - R&D Software (EMEA computers) is set for installation because it ... The assignment of application Remote Administrator v2.1 from policy Software ...
    (microsoft.public.windows.group_policy)
  • Re: Group Policy for Users not Logged into the Domain
    ... addition to other typical user profile specific settings like IE ... > computers themselves are members of the domain. ... > script group policy that works fine with these computers. ... > like kiosk machines where domain authentication for users is not> required. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Delegating permission to add computers to the domain
    ... Delegation is needed, not on the Computers container. ... I don't believe sysprep joins machines to OUs where groups have been ...
    (microsoft.public.windows.server.active_directory)
  • Re: better way to limit users/group to logon to specific workstati
    ... You can still do it in policy, ... logon locally setting, and apply it to all computers except the ones you ... Workstations" attribute - applying to the user accounts ...
    (microsoft.public.windows.group_policy)
  • Re: EventID 1054 from Userenv for startup script
    ... Did you configure the mentioned policy for the XP computers? ... startup script currently does not have Authenticated Users in its ACL. ... It obviously gets group policy ...
    (microsoft.public.windows.group_policy)