Re: GP settings questions?
- From: "Gary V." <salarmy@xxxxxxxxxxxx>
- Date: 25 Aug 2005 13:33:36 -0700
Sorry for the delay, I've been working on the GP's. I think I got it
down for the most part. One question, I made a domain policy and all
settings took affect. However I have noticed some settings don't take
affect in the computers or servers OU. example: disable access to
control panel works on the domain level but in the workstations OU it
never takes effect? Also things like force a spacific screen saver or
theme don't take effict?
Thanks for your help.
Gary V.
"Nathan Liu [MSFT]" wrote:
> Hi Gary,
>
> Thank you for your quick reply.
>
> As you mentioned, I understand that you have create a Group policy to run a
> scripts options for both users and computers, when you link this GP to the
> SBSComputers OU, and find the user config admin template GP is not taking
> affect, but when you link it to the domain.local, it work. Certainly, this
> behavior is expectation, since the SBSComputers OU only contains the all
> client computers which are added by using the SBS Server Wizard, and the
> SBSUsers OU only contains the all users which are added by using the Add
> User Wizard. Therefore, if you link the specific GP to the SBSComputers OU,
> the configuration of the GP for the users will cannot take affect.
>
> Additionally, if we manually create a specific OU, and move the all
> SBSComputers and SBSUsers to this OU, it will affect some wizards on the
> SBS Server. Consider your current requirement, we suggest you create two
> specific GP, and separate configure the settings for the SBSComputers and
> the SBSUsers, then separate link to the appropriate OU. Thanks for your
> understanding.
>
> I am appreciated your time and cooperation. If anything is unclear, please
> feel free to let me know. I am looking forward to hearing from you.
>
> Best regards,
>
> Nathan Liu (MSFT)
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
> ======================================================
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>
> When opening a new thread via the web interface, we recommend you check the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
> ======================================================
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> --------------------
> >From: "Gary V." <salarmy@xxxxxxxxxxxx>
> >Newsgroups: microsoft.public.windows.server.sbs
> >Subject: Re: GP settings questions?
> >Date: 22 Aug 2005 14:32:50 -0700
> >Organization: http://groups.google.com
> >Lines: 127
> >Message-ID: <1124746370.233416.92190@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
> >References: <1124392537.340000.295790@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
> > <1124470815.100844.303480@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
> > <kSd4r7rpFHA.944@xxxxxxxxxxxxxxxxxxxxx>
> >NNTP-Posting-Host: 208.53.87.254
> >Mime-Version: 1.0
> >Content-Type: text/plain; charset="iso-8859-1"
> >X-Trace: posting.google.com 1124746376 11155 127.0.0.1 (22 Aug 2005
> 21:32:56 GMT)
> >X-Complaints-To: groups-abuse@xxxxxxxxxx
> >NNTP-Posting-Date: Mon, 22 Aug 2005 21:32:56 +0000 (UTC)
> >In-Reply-To: <kSd4r7rpFHA.944@xxxxxxxxxxxxxxxxxxxxx>
> >User-Agent: G2/0.2
> >Complaints-To: groups-abuse@xxxxxxxxxx
> >Injection-Info: z14g2000cwz.googlegroups.com; posting-host=208.53.87.254;
> > posting-account=FbCvfA0AAACjuAQLB1cdUV3g5WbrHvTY
> >Path:
> TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
> ne.de!news.glorb.com!postnews.google.com!z14g2000cwz.googlegroups.com!not-fo
> r-mail
> >Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:146771
> >X-Tomcat-NG: microsoft.public.windows.server.sbs
> >
> >Ok got all that. Thank you for your help. Howerver, for example,
> >sbscomputers OU has all authinticated users in the scop but the user
> >config admin template gp is not taking affect. I have a bat run on
> >logon in the scrips options for both users and computers and they do
> >not run, but when i link to the domain.local it runs. I have added all
> >my computers using the sbs server wizard. How would I set that up in
> >the OU's again manually, ie. scop under sbscomputers apply to all sbs
> >computers/users? Short of that I'll try to add the users to the scop
> >and see how that works?
> >
> >Thanks again for your continued time.
> >Gary V.
> >"Nathan Liu [MSFT]" wrote:
> >> Hi Gary,
> >>
> >> Thank you for your kindly update.
> >>
> >> According to your description, I understand that you have custom some
> Group
> >> Policy, and you want these GP only affect on specific OU object. If I
> have
> >> misunderstood your concern, please don't hesitate to let me know.
> >>
> >> Define the specific OU container:
> >>
> >> 1. By default, the SBSComputers OU contains the all client computers
> that
> >> are added by using the http://ServerName/connectcomputer link. And the
> >> SBSServers OU only contains the SBS Server and the other member Servers.
> >>
> >> 2. We also can create the specific OU under the SBSComputers or
> >> SBSServers node, then move the specific object to the specific OU, so we
> >> can define the specific OU container, and link the specific Group Policy
> to
> >> the specific OU, let the GP only affect the specific OU.
> >>
> >> Define the specific GP affect scope:
> >>
> >> 1. Run 'gpmc.msc' on the command prompt, and expand
> >> Forest(DomainName)/Domains/DomainName/Group Policy Objects. Click the
> >> specific GPO, in the right pane, click Scope tab, you can find which
> >> locations are linked to this GPO, you can right-click the appropriate
> >> location, and clear-click the 'Link Enabled' to disable link this GPO to
> >> this location.
> >>
> >> 2. To Block Inheritance, for example, right-click the SBSComputers OU,
> >> and click 'Block Inheritance', using block inheritance prevents GPOs
> linked
> >> to higher sites, domains, or organizational units from being
> automatically
> >> inherited by the child-level. So the specific GPO only affect the
> specific
> >> OU, and no GPO inheritance to this OU.
> >>
> >> To get additional detailed information, you may refer to the following
> >> document:
> >>
> >> Managing inheritance of Group Policy
> >>
> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Serve
> >> rHelp/212eb1fd-11f4-465f-b243-73e542d06b2c.mspx
> >>
> >> I am appreciated your time and cooperation. If anything is unclear,
> please
> >> feel free to let me know. I am looking forward to hearing from you.
> >>
> >> Best regards,
> >>
> >> Nathan Liu (MSFT)
> >> Microsoft CSS Online Newsgroup Support
> >>
> >> Get Secure! - www.microsoft.com/security
> >> ======================================================
> >> This newsgroup only focuses on SBS technical issues. If you have issues
> >> regarding other Microsoft products, you'd better post in the
> corresponding
> >> newsgroups so that they can be resolved in an efficient and timely
> manner.
> >> You can locate the newsgroup here:
> >> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
> >>
> >> When opening a new thread via the web interface, we recommend you check
> the
> >> "Notify me of replies" box to receive e-mail notifications when there are
> >> any updates in your thread. When responding to posts via your newsreader,
> >> please "Reply to Group" so that others may learn and benefit from your
> >> issue.
> >>
> >> Microsoft engineers can only focus on one issue per thread. Although we
> >> provide other information for your reference, we recommend you post
> >> different incidents in different threads to keep the thread clean. In
> doing
> >> so, it will ensure your issues are resolved in a timely manner.
> >>
> >> For urgent issues, you may want to contact Microsoft CSS directly. Please
> >> check http://support.microsoft.com for regional support phone numbers.
> >>
> >> Any input or comments in this thread are highly appreciated.
> >> ======================================================
> >> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> >>
> >> --------------------
> >> >From: "Gary V." <salarmy@xxxxxxxxxxxx>
> >> >Newsgroups: microsoft.public.windows.server.sbs
> >> >Subject: Re: GP settings questions?
> >> >Date: 19 Aug 2005 10:00:15 -0700
> >> >Organization: http://groups.google.com
> >> >Lines: 8
> >> >Message-ID: <1124470815.100844.303480@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
> >> >References: <1124392537.340000.295790@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
> >> > <5KGCZ#IpFHA.940@xxxxxxxxxxxxxxxxxxxxx>
> >> >NNTP-Posting-Host: 208.53.87.254
> >> >Mime-Version: 1.0
> >> >Content-Type: text/plain; charset="iso-8859-1"
> >> >X-Trace: posting.google.com 1124470820 2802 127.0.0.1 (19 Aug 2005
> >> 17:00:20 GMT)
> >> >X-Complaints-To: groups-abuse@xxxxxxxxxx
> >> >NNTP-Posting-Date: Fri, 19 Aug 2005 17:00:20 +0000 (UTC)
> >> >In-Reply-To: <5KGCZ#IpFHA.940@xxxxxxxxxxxxxxxxxxxxx>
> >> >User-Agent: G2/0.2
> >> >Complaints-To: groups-abuse@xxxxxxxxxx
> >> >Injection-Info: o13g2000cwo.googlegroups.com;
> posting-host=208.53.87.254;
> >> > posting-account=FbCvfA0AAACjuAQLB1cdUV3g5WbrHvTY
> >> >Path:
> >>
> TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
> >>
> ne.de!border2.nntp.dca.giganews.com!nntp.giganews.com!news.glorb.com!postnew
> >> s.google.com!o13g2000cwo.googlegroups.com!not-for-mail
> >> >Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:145983
> >> >X-Tomcat-NG: microsoft.public.windows.server.sbs
> >> >
> >> >Very good I can do that. However Let me reexplain my first question...
> >> >I can make gp in the workstation, server, and notebook OU but how do I
> >> >make the workstation OU only rollout to workstations, the server OU
> >> >only affect my SBS server and not the workstations and so on?
> >> >
> >> >Thanks for your time and help
> >> >Gary V.
> >> >
> >> >
> >
> >
.
- Follow-Ups:
- Re: GP settings questions?
- From: "Nathan Liu [MSFT]"
- Re: GP settings questions?
- References:
- GP settings questions?
- From: Gary V.
- Re: GP settings questions?
- From: Gary V.
- Re: GP settings questions?
- From: "Nathan Liu [MSFT]"
- GP settings questions?
- Prev by Date: blocking ports
- Next by Date: Re: isaserver.org gets SBS friendly
- Previous by thread: Re: GP settings questions?
- Next by thread: Re: GP settings questions?
- Index(es):
Relevant Pages
|
Loading
