Re: Group Policy By User

Meinolf Weber wrote:
Hello Grant,

OU means Organizational Unit in Active Directory, only to an OU you can link a GPO, Group Policy Object.
An OU is for example the Domain controller "folder" in the Active directory structure. The Computers "folder" is a Container. On this container it is not possible to link a GPO.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm

Meinolf Weber wrote:

Hello Grant,

If you still will do it create an OU and move the normal users to it,
then configure your GPO and link it to the OU, so it will only effect
this OU nothing else.

But think really about an additional server.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm
I am running a server with Windows Server 2003 Standard. I have
Active Directory setup as well as Terminal Services. I have 5 users
who will be logging in through Terminal Services and I would like to
limit what they can do. I know that this can be done with Group
Policy but how can I set it up so that I can still log in through
Terminal Services without having the restrictions applied to me?

Thanks for the responses!

I am only using the server for Terminal Services and email. If there
is a way that I can configure the server without Active Directory and
still set policies for all the accounts but one, let me know. I'm
open to ideas. I would really prefer not to buy another server. I've
already forked out a lot for licenses and since I'm only using it for
two things, would prefer not to buy more.

Regarding the solution you posted, what do you mean by OU? I assume
GPO means Group Policy, correct?



Thanks! That's just what I need. Do you know if there is a way to rename the domain name once you have created it in AD? Or do I have to uninstall or reinstall?

.

Relevant Pages

  • Re: Using Group Policy to give install permission
    ... Group Policy is simply (well, ... Active Directory there is only one Organizational Unit: ... Your user account objects or computer account objects must directly reside ... in the Organizational Unit to which you linked the GPO. ...
    (microsoft.public.win2000.group_policy)
  • Re: Group Policy By User
    ... OU means Organizational Unit in Active Directory, only to an OU you can link a GPO, Group Policy Object. ... Active Directory setup as well as Terminal Services. ...
    (microsoft.public.windows.server.general)
  • Re: Event ID 1101 and 1030
    ... OU=FileServers,OU=AllServers,DC=DomainName,DC=org in Win2000 Active Directory. ... The first GPO is applied to Domain. ... right-click the OU to which you applied Group Policy ...
    (microsoft.public.win2000.active_directory)
  • Re: Logon command
    ... Active Directory Users and Computers. ... In properties, on the Group Policy tab, create a new GPO. ... For example, if you want your script to apply to all members of Staff, you ...
    (microsoft.public.windows.server.active_directory)
  • Re: Terminal Server GPO Issue
    ... The name of the OU where the GPOs should not be applied is: Citrix XP ... They both sit at the same level under an OU called Servers. ... Microsoft Windows Operating System Group Policy Result tool v2.0 ... Sharepoint Auth GPO ...
    (microsoft.public.windows.server.active_directory)