Re: GP settings questions?
- From: v-natliu@xxxxxxxxxxxxxxxxxxxx ("Nathan Liu [MSFT]")
- Date: Sun, 28 Aug 2005 09:52:24 GMT
Hi Gary,
Thank you for your update.
Question: One question, I made a domain policy and all settings took
affect. However I have noticed some settings don't take affect in the
computers or servers OU. example: disable access to control panel works on
the domain level but in the workstations OU it never takes effect? Also
things like force a specific screen saver or theme don't take effect?
Answer: Please understand since the workstations, computers, servers OU
only contains PCs, they don't contain any users, however, the 'Prohibit
access to the Control Panel', 'Screen Saver', Desktop Themes options all
belong to the User Configuration, so it does not take effect.
To get additional information:
White Paper: Administering Group Policy by Using the Group Policy
Management Console
http://support.microsoft.com/default.aspx?scid=kb;en-us;818735
I am appreciated your time and cooperation. If anything is unclear, please
feel free to let me know. I am looking forward to hearing from you.
Best regards,
Nathan Liu (MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>From: "Gary V." <salarmy@xxxxxxxxxxxx>
>Newsgroups: microsoft.public.windows.server.sbs
>Subject: Re: GP settings questions?
>Date: 25 Aug 2005 13:33:36 -0700
>Organization: http://groups.google.com
>Lines: 241
>Message-ID: <1125002016.074147.253460@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
>References: <1124392537.340000.295790@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
> <1124746370.233416.92190@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
> <3Z0BMY9pFHA.1208@xxxxxxxxxxxxxxxxxxxxx>
>NNTP-Posting-Host: 208.53.87.254
>Mime-Version: 1.0
>Content-Type: text/plain; charset="iso-8859-1"
>X-Trace: posting.google.com 1125002021 17906 127.0.0.1 (25 Aug 2005
20:33:41 GMT)
>X-Complaints-To: groups-abuse@xxxxxxxxxx
>NNTP-Posting-Date: Thu, 25 Aug 2005 20:33:41 +0000 (UTC)
>In-Reply-To: <3Z0BMY9pFHA.1208@xxxxxxxxxxxxxxxxxxxxx>
>User-Agent: G2/0.2
>X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;
NET CLR 1.1.4322),gzip(gfe),gzip(gfe)
>X-HTTP-Via: 1.1 SERVER01
>Complaints-To: groups-abuse@xxxxxxxxxx
>Injection-Info: f14g2000cwb.googlegroups.com; posting-host=208.53.87.254;
> posting-account=FbCvfA0AAACjuAQLB1cdUV3g5WbrHvTY
>Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!news.glorb.com!postnews.google.com!f14g2000cwb.googlegroups.com!not-fo
r-mail
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:147862
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Sorry for the delay, I've been working on the GP's. I think I got it
>down for the most part. One question, I made a domain policy and all
>settings took affect. However I have noticed some settings don't take
>affect in the computers or servers OU. example: disable access to
>control panel works on the domain level but in the workstations OU it
>never takes effect? Also things like force a spacific screen saver or
>theme don't take effict?
>Thanks for your help.
>Gary V.
>"Nathan Liu [MSFT]" wrote:
>> Hi Gary,
>>
>> Thank you for your quick reply.
>>
>> As you mentioned, I understand that you have create a Group policy to
run a
>> scripts options for both users and computers, when you link this GP to
the
>> SBSComputers OU, and find the user config admin template GP is not taking
>> affect, but when you link it to the domain.local, it work. Certainly,
this
>> behavior is expectation, since the SBSComputers OU only contains the all
>> client computers which are added by using the SBS Server Wizard, and the
>> SBSUsers OU only contains the all users which are added by using the Add
>> User Wizard. Therefore, if you link the specific GP to the SBSComputers
OU,
>> the configuration of the GP for the users will cannot take affect.
>>
>> Additionally, if we manually create a specific OU, and move the all
>> SBSComputers and SBSUsers to this OU, it will affect some wizards on the
>> SBS Server. Consider your current requirement, we suggest you create two
>> specific GP, and separate configure the settings for the SBSComputers and
>> the SBSUsers, then separate link to the appropriate OU. Thanks for your
>> understanding.
>>
>> I am appreciated your time and cooperation. If anything is unclear,
please
>> feel free to let me know. I am looking forward to hearing from you.
>>
>> Best regards,
>>
>> Nathan Liu (MSFT)
>> Microsoft CSS Online Newsgroup Support
>>
>> Get Secure! - www.microsoft.com/security
>> ======================================================
>> This newsgroup only focuses on SBS technical issues. If you have issues
>> regarding other Microsoft products, you'd better post in the
corresponding
>> newsgroups so that they can be resolved in an efficient and timely
manner.
>> You can locate the newsgroup here:
>> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>>
>> When opening a new thread via the web interface, we recommend you check
the
>> "Notify me of replies" box to receive e-mail notifications when there are
>> any updates in your thread. When responding to posts via your newsreader,
>> please "Reply to Group" so that others may learn and benefit from your
>> issue.
>>
>> Microsoft engineers can only focus on one issue per thread. Although we
>> provide other information for your reference, we recommend you post
>> different incidents in different threads to keep the thread clean. In
doing
>> so, it will ensure your issues are resolved in a timely manner.
>>
>> For urgent issues, you may want to contact Microsoft CSS directly. Please
>> check http://support.microsoft.com for regional support phone numbers.
>>
>> Any input or comments in this thread are highly appreciated.
>> ======================================================
>> This posting is provided "AS IS" with no warranties, and confers no
rights.
>>
>> --------------------
>> >From: "Gary V." <salarmy@xxxxxxxxxxxx>
>> >Newsgroups: microsoft.public.windows.server.sbs
>> >Subject: Re: GP settings questions?
>> >Date: 22 Aug 2005 14:32:50 -0700
>> >Organization: http://groups.google.com
>> >Lines: 127
>> >Message-ID: <1124746370.233416.92190@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
>> >References: <1124392537.340000.295790@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
>> > <1124470815.100844.303480@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
>> > <kSd4r7rpFHA.944@xxxxxxxxxxxxxxxxxxxxx>
>> >NNTP-Posting-Host: 208.53.87.254
>> >Mime-Version: 1.0
>> >Content-Type: text/plain; charset="iso-8859-1"
>> >X-Trace: posting.google.com 1124746376 11155 127.0.0.1 (22 Aug 2005
>> 21:32:56 GMT)
>> >X-Complaints-To: groups-abuse@xxxxxxxxxx
>> >NNTP-Posting-Date: Mon, 22 Aug 2005 21:32:56 +0000 (UTC)
>> >In-Reply-To: <kSd4r7rpFHA.944@xxxxxxxxxxxxxxxxxxxxx>
>> >User-Agent: G2/0.2
>> >Complaints-To: groups-abuse@xxxxxxxxxx
>> >Injection-Info: z14g2000cwz.googlegroups.com;
posting-host=208.53.87.254;
>> > posting-account=FbCvfA0AAACjuAQLB1cdUV3g5WbrHvTY
>> >Path:
>>
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
>>
ne.de!news.glorb.com!postnews.google.com!z14g2000cwz.googlegroups.com!not-fo
>> r-mail
>> >Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:146771
>> >X-Tomcat-NG: microsoft.public.windows.server.sbs
>> >
>> >Ok got all that. Thank you for your help. Howerver, for example,
>> >sbscomputers OU has all authinticated users in the scop but the user
>> >config admin template gp is not taking affect. I have a bat run on
>> >logon in the scrips options for both users and computers and they do
>> >not run, but when i link to the domain.local it runs. I have added all
>> >my computers using the sbs server wizard. How would I set that up in
>> >the OU's again manually, ie. scop under sbscomputers apply to all sbs
>> >computers/users? Short of that I'll try to add the users to the scop
>> >and see how that works?
>> >
>> >Thanks again for your continued time.
>> >Gary V.
>> >"Nathan Liu [MSFT]" wrote:
>> >> Hi Gary,
>> >>
>> >> Thank you for your kindly update.
>> >>
>> >> According to your description, I understand that you have custom some
>> Group
>> >> Policy, and you want these GP only affect on specific OU object. If I
>> have
>> >> misunderstood your concern, please don't hesitate to let me know.
>> >>
>> >> Define the specific OU container:
>> >>
>> >> 1. By default, the SBSComputers OU contains the all client computers
>> that
>> >> are added by using the http://ServerName/connectcomputer link. And the
>> >> SBSServers OU only contains the SBS Server and the other member
Servers.
>> >>
>> >> 2. We also can create the specific OU under the SBSComputers or
>> >> SBSServers node, then move the specific object to the specific OU, so
we
>> >> can define the specific OU container, and link the specific Group
Policy
>> to
>> >> the specific OU, let the GP only affect the specific OU.
>> >>
>> >> Define the specific GP affect scope:
>> >>
>> >> 1. Run 'gpmc.msc' on the command prompt, and expand
>> >> Forest(DomainName)/Domains/DomainName/Group Policy Objects. Click the
>> >> specific GPO, in the right pane, click Scope tab, you can find which
>> >> locations are linked to this GPO, you can right-click the appropriate
>> >> location, and clear-click the 'Link Enabled' to disable link this GPO
to
>> >> this location.
>> >>
>> >> 2. To Block Inheritance, for example, right-click the SBSComputers
OU,
>> >> and click 'Block Inheritance', using block inheritance prevents GPOs
>> linked
>> >> to higher sites, domains, or organizational units from being
>> automatically
>> >> inherited by the child-level. So the specific GPO only affect the
>> specific
>> >> OU, and no GPO inheritance to this OU.
>> >>
>> >> To get additional detailed information, you may refer to the following
>> >> document:
>> >>
>> >> Managing inheritance of Group Policy
>> >>
>>
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Serve
>> >> rHelp/212eb1fd-11f4-465f-b243-73e542d06b2c.mspx
>> >>
>> >> I am appreciated your time and cooperation. If anything is unclear,
>> please
>> >> feel free to let me know. I am looking forward to hearing from you.
>> >>
>> >> Best regards,
>> >>
>> >> Nathan Liu (MSFT)
>> >> Microsoft CSS Online Newsgroup Support
>> >>
>> >> Get Secure! - www.microsoft.com/security
>> >> ======================================================
>> >> This newsgroup only focuses on SBS technical issues. If you have
issues
>> >> regarding other Microsoft products, you'd better post in the
>> corresponding
>> >> newsgroups so that they can be resolved in an efficient and timely
>> manner.
>> >> You can locate the newsgroup here:
>> >> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>> >>
>> >> When opening a new thread via the web interface, we recommend you
check
>> the
>> >> "Notify me of replies" box to receive e-mail notifications when there
are
>> >> any updates in your thread. When responding to posts via your
newsreader,
>> >> please "Reply to Group" so that others may learn and benefit from your
>> >> issue.
>> >>
>> >> Microsoft engineers can only focus on one issue per thread. Although
we
>> >> provide other information for your reference, we recommend you post
>> >> different incidents in different threads to keep the thread clean. In
>> doing
>> >> so, it will ensure your issues are resolved in a timely manner.
>> >>
>> >> For urgent issues, you may want to contact Microsoft CSS directly.
Please
>> >> check http://support.microsoft.com for regional support phone numbers.
>> >>
>> >> Any input or comments in this thread are highly appreciated.
>> >> ======================================================
>> >> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>> >>
>> >> --------------------
>> >> >From: "Gary V." <salarmy@xxxxxxxxxxxx>
>> >> >Newsgroups: microsoft.public.windows.server.sbs
>> >> >Subject: Re: GP settings questions?
>> >> >Date: 19 Aug 2005 10:00:15 -0700
>> >> >Organization: http://groups.google.com
>> >> >Lines: 8
>> >> >Message-ID: <1124470815.100844.303480@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
>> >> >References: <1124392537.340000.295790@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
>> >> > <5KGCZ#IpFHA.940@xxxxxxxxxxxxxxxxxxxxx>
>> >> >NNTP-Posting-Host: 208.53.87.254
>> >> >Mime-Version: 1.0
>> >> >Content-Type: text/plain; charset="iso-8859-1"
>> >> >X-Trace: posting.google.com 1124470820 2802 127.0.0.1 (19 Aug 2005
>> >> 17:00:20 GMT)
>> >> >X-Complaints-To: groups-abuse@xxxxxxxxxx
>> >> >NNTP-Posting-Date: Fri, 19 Aug 2005 17:00:20 +0000 (UTC)
>> >> >In-Reply-To: <5KGCZ#IpFHA.940@xxxxxxxxxxxxxxxxxxxxx>
>> >> >User-Agent: G2/0.2
>> >> >Complaints-To: groups-abuse@xxxxxxxxxx
>> >> >Injection-Info: o13g2000cwo.googlegroups.com;
>> posting-host=208.53.87.254;
>> >> > posting-account=FbCvfA0AAACjuAQLB1cdUV3g5WbrHvTY
>> >> >Path:
>> >>
>>
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
>> >>
>>
ne.de!border2.nntp.dca.giganews.com!nntp.giganews.com!news.glorb.com!postnew
>> >> s.google.com!o13g2000cwo.googlegroups.com!not-for-mail
>> >> >Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.sbs:145983
>> >> >X-Tomcat-NG: microsoft.public.windows.server.sbs
>> >> >
>> >> >Very good I can do that. However Let me reexplain my first
question...
>> >> >I can make gp in the workstation, server, and notebook OU but how do
I
>> >> >make the workstation OU only rollout to workstations, the server OU
>> >> >only affect my SBS server and not the workstations and so on?
>> >> >
>> >> >Thanks for your time and help
>> >> >Gary V.
>> >> >
>> >> >
>> >
>> >
>
>
.
- Follow-Ups:
- Re: GP settings questions?
- From: Gary V.
- Re: GP settings questions?
- References:
- GP settings questions?
- From: Gary V.
- Re: GP settings questions?
- From: Gary V.
- GP settings questions?
- Prev by Date: Hot to move users shared folders location
- Next by Date: RE: OMA: users get error, but admin can use just fine
- Previous by thread: Re: GP settings questions?
- Next by thread: Re: GP settings questions?
- Index(es):
Relevant Pages
|
