Re: GP settings questions?



Hi Gary,

Thank you for your kindly update.

According to your description, I understand that you have custom some Group
Policy, and you want these GP only affect on specific OU object. If I have
misunderstood your concern, please don't hesitate to let me know.

Define the specific OU container:

1. By default, the SBSComputers OU contains the all client computers that
are added by using the http://ServerName/connectcomputer link. And the
SBSServers OU only contains the SBS Server and the other member Servers.

2. We also can create the specific OU under the SBSComputers or
SBSServers node, then move the specific object to the specific OU, so we
can define the specific OU container, and link the specific Group Policy to
the specific OU, let the GP only affect the specific OU.

Define the specific GP affect scope:

1. Run 'gpmc.msc' on the command prompt, and expand
Forest(DomainName)/Domains/DomainName/Group Policy Objects. Click the
specific GPO, in the right pane, click Scope tab, you can find which
locations are linked to this GPO, you can right-click the appropriate
location, and clear-click the 'Link Enabled' to disable link this GPO to
this location.

2. To Block Inheritance, for example, right-click the SBSComputers OU,
and click 'Block Inheritance', using block inheritance prevents GPOs linked
to higher sites, domains, or organizational units from being automatically
inherited by the child-level. So the specific GPO only affect the specific
OU, and no GPO inheritance to this OU.

To get additional detailed information, you may refer to the following
document:

Managing inheritance of Group Policy
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Serve
rHelp/212eb1fd-11f4-465f-b243-73e542d06b2c.mspx

I am appreciated your time and cooperation. If anything is unclear, please
feel free to let me know. I am looking forward to hearing from you.

Best regards,

Nathan Liu (MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>From: "Gary V." <salarmy@xxxxxxxxxxxx>
>Newsgroups: microsoft.public.windows.server.sbs
>Subject: Re: GP settings questions?
>Date: 19 Aug 2005 10:00:15 -0700
>Organization: http://groups.google.com
>Lines: 8
>Message-ID: <1124470815.100844.303480@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
>References: <1124392537.340000.295790@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
> <5KGCZ#IpFHA.940@xxxxxxxxxxxxxxxxxxxxx>
>NNTP-Posting-Host: 208.53.87.254
>Mime-Version: 1.0
>Content-Type: text/plain; charset="iso-8859-1"
>X-Trace: posting.google.com 1124470820 2802 127.0.0.1 (19 Aug 2005
17:00:20 GMT)
>X-Complaints-To: groups-abuse@xxxxxxxxxx
>NNTP-Posting-Date: Fri, 19 Aug 2005 17:00:20 +0000 (UTC)
>In-Reply-To: <5KGCZ#IpFHA.940@xxxxxxxxxxxxxxxxxxxxx>
>User-Agent: G2/0.2
>Complaints-To: groups-abuse@xxxxxxxxxx
>Injection-Info: o13g2000cwo.googlegroups.com; posting-host=208.53.87.254;
> posting-account=FbCvfA0AAACjuAQLB1cdUV3g5WbrHvTY
>Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!border2.nntp.dca.giganews.com!nntp.giganews.com!news.glorb.com!postnew
s.google.com!o13g2000cwo.googlegroups.com!not-for-mail
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:145983
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Very good I can do that. However Let me reexplain my first question...
>I can make gp in the workstation, server, and notebook OU but how do I
>make the workstation OU only rollout to workstations, the server OU
>only affect my SBS server and not the workstations and so on?
>
>Thanks for your time and help
>Gary V.
>
>

.



Relevant Pages

  • Re: SCW question.
    ... Created a new Server and installed IIS. ... and saw that the default rights for IUSR and IWAM users are there. ... Server to the domain without and GPO's applied...Local Security policy ... rights (which coincides with my Member server GPO settings). ...
    (microsoft.public.windows.server.security)
  • Re: Group Policy is now inhibiting the Administrator account
    ... under Group Policy Objects - those are the individual GPOs. ... You can apply any given GPO to one or more OUs, ... I use all of the default security in SBS, ... log on to the server with your own account. ...
    (microsoft.public.windows.server.sbs)
  • Re: User Profiles
    ... You can use Folder redirection for the Start Menu, ... Exactly what icons are you getting from the Default Domain Policy, ... and in which GPO setting are they defined? ... MCSE, CCEA, Microsoft MVP - Terminal Server ...
    (microsoft.public.windows.terminal_services)
  • Re: GPO - Access denied after changing a GP setting
    ... You are about to restore Default Domain policy and Default domain Controller po ... This may render some server applications to fail. ... Unable to open the GPO due to access denied. ... You are about to restore Default Domain controller policy for the following domain ...
    (microsoft.public.windows.server.security)
  • Re: GPO - Access denied after changing a GP setting
    ... This may render some server applications to fail. ... y Unable to open the GPO due to access denied. ... This tool was unable to re-create the EFS Certificates in the Default D omain Policy GPO Access is denied. ... You are about to restore Default Domain controller policy for the following domain Do you want to continue: ...
    (microsoft.public.windows.server.security)

Loading