Re: Group Policies

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Miha Pihler (mihap-news_at_atlantis.si)
Date: 09/08/04 

Date: Wed, 8 Sep 2004 13:11:11 +0200

Hi Dave,

I think best thing in this case as your describe (need for different groups
of people and different settings) would be to create different OU
(Organization Units).

E.g. you create one OU named IT department, next OU would be named Users OU
etc. Now you have to define your policy on these OUs (e.g. different
settings for IT department OU, different settings for Users OU... etc). All
users inside e.g. Users OU would have same restrictions.

I hope this helps,

Mike

"Dave" <anonymous@discussions.microsoft.com> wrote in message
news:7ff701c49592$244ebbc0$a501280a@phx.gbl...
> We have a network we need to have strong security on.
>
> The servers all need a set of security restrictions on
> which can all be set in a group policy - only two of 10
> will be domain controllers.
>
> The PCs for users all need a certain range of settings
> set through group policies.
>
> And then the IT system Administators again need ceratin
> settings.
>
> If we set a group of users for the servers to log on with
> in AD, then a seperate group for users and then a third
> for the IT department, each with their own policies -
> would this work?

Relevant Pages

  • Group Policies
    ... The servers all need a set of security restrictions on ... The PCs for users all need a certain range of settings ... set through group policies. ...
    (microsoft.public.windows.server.general)
  • Re: Local Group Policy versus OU (Time Service)
    ... One way I'd skin this is, if those servers are all over your domain (i.e. ... I very rarely come across a lot of differences in policy btw the PDC role ... because they'll all have identical settings. ... > lot of Group Policy settings differently on your DC's and member servers ...
    (microsoft.public.windows.group_policy)
  • Re: Continual disconnections
    ... Looking at the ipconfig/all info, look at the line that says DNS ... This will bring up your Local Area Connection properties box. ... IP addresses from what the ipconfig /all lists beside DNS Servers ... On this page Under the tab IP Settings You can see headings..Ip Addresses ...
    (microsoft.public.windowsxp.network_web)
  • Re: restricted groups frustration!
    ... Have you run GPMC Results wizard against one of the intended target servers to ensure they are actually processing that GPO and getting that particular setting. ... you could then enable security policy logging on one of the target servers to see what's up. ... If this is not the desired RSOP, you'll most likely want to create a new gpo with these settings in it and security filter it to 'Domain Computers', which avoids domain controllers. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Group Policy Firewall Exception Problem
    ... the domain ends up with two sets of firewall settings. ... I have set up about a dozen or more Windows 2003, R2 servers on our AD ... and those OUs had a common GPO linked to them. ...
    (microsoft.public.windows.group_policy)