Re: GP settings questions?

Tech-Archive recommends: Fix windows errors by optimizing your registry

That makes more sense. I think I got it now.

Thanks for all your help and time.
Gary V.
"Nathan Liu [MSFT]" wrote:
> Hi Gary,
>
> Thank you for your update.
>
> Question: One question, I made a domain policy and all settings took
> affect. However I have noticed some settings don't take affect in the
> computers or servers OU. example: disable access to control panel works on
> the domain level but in the workstations OU it never takes effect? Also
> things like force a specific screen saver or theme don't take effect?
>
> Answer: Please understand since the workstations, computers, servers OU
> only contains PCs, they don't contain any users, however, the 'Prohibit
> access to the Control Panel', 'Screen Saver', Desktop Themes options all
> belong to the User Configuration, so it does not take effect.
>
> To get additional information:
>
> White Paper: Administering Group Policy by Using the Group Policy
> Management Console
> http://support.microsoft.com/default.aspx?scid=kb;en-us;818735
>
> I am appreciated your time and cooperation. If anything is unclear, please
> feel free to let me know. I am looking forward to hearing from you.
>
> Best regards,
>
> Nathan Liu (MSFT)
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
> ======================================================
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>
> When opening a new thread via the web interface, we recommend you check the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
> ======================================================
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> --------------------
> >From: "Gary V." <salarmy@xxxxxxxxxxxx>
> >Newsgroups: microsoft.public.windows.server.sbs
> >Subject: Re: GP settings questions?
> >Date: 25 Aug 2005 13:33:36 -0700
> >Organization: http://groups.google.com
> >Lines: 241
> >Message-ID: <1125002016.074147.253460@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
> >References: <1124392537.340000.295790@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
> > <1124746370.233416.92190@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
> > <3Z0BMY9pFHA.1208@xxxxxxxxxxxxxxxxxxxxx>
> >NNTP-Posting-Host: 208.53.87.254
> >Mime-Version: 1.0
> >Content-Type: text/plain; charset="iso-8859-1"
> >X-Trace: posting.google.com 1125002021 17906 127.0.0.1 (25 Aug 2005
> 20:33:41 GMT)
> >X-Complaints-To: groups-abuse@xxxxxxxxxx
> >NNTP-Posting-Date: Thu, 25 Aug 2005 20:33:41 +0000 (UTC)
> >In-Reply-To: <3Z0BMY9pFHA.1208@xxxxxxxxxxxxxxxxxxxxx>
> >User-Agent: G2/0.2
> >X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;
> .NET CLR 1.1.4322),gzip(gfe),gzip(gfe)
> >X-HTTP-Via: 1.1 SERVER01
> >Complaints-To: groups-abuse@xxxxxxxxxx
> >Injection-Info: f14g2000cwb.googlegroups.com; posting-host=208.53.87.254;
> > posting-account=FbCvfA0AAACjuAQLB1cdUV3g5WbrHvTY
> >Path:
> TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
> ne.de!news.glorb.com!postnews.google.com!f14g2000cwb.googlegroups.com!not-fo
> r-mail
> >Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:147862
> >X-Tomcat-NG: microsoft.public.windows.server.sbs
> >
> >Sorry for the delay, I've been working on the GP's. I think I got it
> >down for the most part. One question, I made a domain policy and all
> >settings took affect. However I have noticed some settings don't take
> >affect in the computers or servers OU. example: disable access to
> >control panel works on the domain level but in the workstations OU it
> >never takes effect? Also things like force a spacific screen saver or
> >theme don't take effict?
> >Thanks for your help.
> >Gary V.
> >"Nathan Liu [MSFT]" wrote:
> >> Hi Gary,
> >>
> >> Thank you for your quick reply.
> >>
> >> As you mentioned, I understand that you have create a Group policy to
> run a
> >> scripts options for both users and computers, when you link this GP to
> the
> >> SBSComputers OU, and find the user config admin template GP is not taking
> >> affect, but when you link it to the domain.local, it work. Certainly,
> this
> >> behavior is expectation, since the SBSComputers OU only contains the all
> >> client computers which are added by using the SBS Server Wizard, and the
> >> SBSUsers OU only contains the all users which are added by using the Add
> >> User Wizard. Therefore, if you link the specific GP to the SBSComputers
> OU,
> >> the configuration of the GP for the users will cannot take affect.
> >>
> >> Additionally, if we manually create a specific OU, and move the all
> >> SBSComputers and SBSUsers to this OU, it will affect some wizards on the
> >> SBS Server. Consider your current requirement, we suggest you create two
> >> specific GP, and separate configure the settings for the SBSComputers and
> >> the SBSUsers, then separate link to the appropriate OU. Thanks for your
> >> understanding.
> >>
> >> I am appreciated your time and cooperation. If anything is unclear,
> please
> >> feel free to let me know. I am looking forward to hearing from you.
> >>
> >> Best regards,
> >>
> >> Nathan Liu (MSFT)
> >> Microsoft CSS Online Newsgroup Support
> >>
> >> Get Secure! - www.microsoft.com/security
> >> ======================================================
> >> This newsgroup only focuses on SBS technical issues. If you have issues
> >> regarding other Microsoft products, you'd better post in the
> corresponding
> >> newsgroups so that they can be resolved in an efficient and timely
> manner.
> >> You can locate the newsgroup here:
> >> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
> >>
> >> When opening a new thread via the web interface, we recommend you check
> the
> >> "Notify me of replies" box to receive e-mail notifications when there are
> >> any updates in your thread. When responding to posts via your newsreader,
> >> please "Reply to Group" so that others may learn and benefit from your
> >> issue.
> >>
> >> Microsoft engineers can only focus on one issue per thread. Although we
> >> provide other information for your reference, we recommend you post
> >> different incidents in different threads to keep the thread clean. In
> doing
> >> so, it will ensure your issues are resolved in a timely manner.
> >>
> >> For urgent issues, you may want to contact Microsoft CSS directly. Please
> >> check http://support.microsoft.com for regional support phone numbers.
> >>
> >> Any input or comments in this thread are highly appreciated.
> >> ======================================================
> >> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> >>
> >> --------------------
> >> >From: "Gary V." <salarmy@xxxxxxxxxxxx>
> >> >Newsgroups: microsoft.public.windows.server.sbs
> >> >Subject: Re: GP settings questions?
> >> >Date: 22 Aug 2005 14:32:50 -0700
> >> >Organization: http://groups.google.com
> >> >Lines: 127
> >> >Message-ID: <1124746370.233416.92190@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
> >> >References: <1124392537.340000.295790@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
> >> > <1124470815.100844.303480@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
> >> > <kSd4r7rpFHA.944@xxxxxxxxxxxxxxxxxxxxx>
> >> >NNTP-Posting-Host: 208.53.87.254
> >> >Mime-Version: 1.0
> >> >Content-Type: text/plain; charset="iso-8859-1"
> >> >X-Trace: posting.google.com 1124746376 11155 127.0.0.1 (22 Aug 2005
> >> 21:32:56 GMT)
> >> >X-Complaints-To: groups-abuse@xxxxxxxxxx
> >> >NNTP-Posting-Date: Mon, 22 Aug 2005 21:32:56 +0000 (UTC)
> >> >In-Reply-To: <kSd4r7rpFHA.944@xxxxxxxxxxxxxxxxxxxxx>
> >> >User-Agent: G2/0.2
> >> >Complaints-To: groups-abuse@xxxxxxxxxx
> >> >Injection-Info: z14g2000cwz.googlegroups.com;
> posting-host=208.53.87.254;
> >> > posting-account=FbCvfA0AAACjuAQLB1cdUV3g5WbrHvTY
> >> >Path:
> >>
> TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
> >>
> ne.de!news.glorb.com!postnews.google.com!z14g2000cwz.googlegroups.com!not-fo
> >> r-mail
> >> >Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:146771
> >> >X-Tomcat-NG: microsoft.public.windows.server.sbs
> >> >
> >> >Ok got all that. Thank you for your help. Howerver, for example,
> >> >sbscomputers OU has all authinticated users in the scop but the user
> >> >config admin template gp is not taking affect. I have a bat run on
> >> >logon in the scrips options for both users and computers and they do
> >> >not run, but when i link to the domain.local it runs. I have added all
> >> >my computers using the sbs server wizard. How would I set that up in
> >> >the OU's again manually, ie. scop under sbscomputers apply to all sbs
> >> >computers/users? Short of that I'll try to add the users to the scop
> >> >and see how that works?
> >> >
> >> >Thanks again for your continued time.
> >> >Gary V.
> >> >"Nathan Liu [MSFT]" wrote:
> >> >> Hi Gary,
> >> >>
> >> >> Thank you for your kindly update.
> >> >>
> >> >> According to your description, I understand that you have custom some
> >> Group
> >> >> Policy, and you want these GP only affect on specific OU object. If I
> >> have
> >> >> misunderstood your concern, please don't hesitate to let me know.
> >> >>
> >> >> Define the specific OU container:
> >> >>
> >> >> 1. By default, the SBSComputers OU contains the all client computers
> >> that
> >> >> are added by using the http://ServerName/connectcomputer link. And the
> >> >> SBSServers OU only contains the SBS Server and the other member
> Servers.
> >> >>
> >> >> 2. We also can create the specific OU under the SBSComputers or
> >> >> SBSServers node, then move the specific object to the specific OU, so
> we
> >> >> can define the specific OU container, and link the specific Group
> Policy
> >> to
> >> >> the specific OU, let the GP only affect the specific OU.
> >> >>
> >> >> Define the specific GP affect scope:
> >> >>
> >> >> 1. Run 'gpmc.msc' on the command prompt, and expand
> >> >> Forest(DomainName)/Domains/DomainName/Group Policy Objects. Click the
> >> >> specific GPO, in the right pane, click Scope tab, you can find which
> >> >> locations are linked to this GPO, you can right-click the appropriate
> >> >> location, and clear-click the 'Link Enabled' to disable link this GPO
> to
> >> >> this location.
> >> >>
> >> >> 2. To Block Inheritance, for example, right-click the SBSComputers
> OU,
> >> >> and click 'Block Inheritance', using block inheritance prevents GPOs
> >> linked
> >> >> to higher sites, domains, or organizational units from being
> >> automatically
> >> >> inherited by the child-level. So the specific GPO only affect the
> >> specific
> >> >> OU, and no GPO inheritance to this OU.
> >> >>
> >> >> To get additional detailed information, you may refer to the following
> >> >> document:
> >> >>
> >> >> Managing inheritance of Group Policy
> >> >>
> >>
> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Serve
> >> >> rHelp/212eb1fd-11f4-465f-b243-73e542d06b2c.mspx
> >> >>
> >> >> I am appreciated your time and cooperation. If anything is unclear,
> >> please
> >> >> feel free to let me know. I am looking forward to hearing from you.
> >> >>
> >> >> Best regards,
> >> >>
> >> >> Nathan Liu (MSFT)
> >> >> Microsoft CSS Online Newsgroup Support
> >> >>
> >> >> Get Secure! - www.microsoft.com/security
> >> >> ======================================================
> >> >> This newsgroup only focuses on SBS technical issues. If you have
> issues
> >> >> regarding other Microsoft products, you'd better post in the
> >> corresponding
> >> >> newsgroups so that they can be resolved in an efficient and timely
> >> manner.
> >> >> You can locate the newsgroup here:
> >> >> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
> >> >>
> >> >> When opening a new thread via the web interface, we recommend you
> check
> >> the
> >> >> "Notify me of replies" box to receive e-mail notifications when there
> are
> >> >> any updates in your thread. When responding to posts via your
> newsreader,
> >> >> please "Reply to Group" so that others may learn and benefit from your
> >> >> issue.
> >> >>
> >> >> Microsoft engineers can only focus on one issue per thread. Although
> we
> >> >> provide other information for your reference, we recommend you post
> >> >> different incidents in different threads to keep the thread clean. In
> >> doing
> >> >> so, it will ensure your issues are resolved in a timely manner.
> >> >>
> >> >> For urgent issues, you may want to contact Microsoft CSS directly.
> Please
> >> >> check http://support.microsoft.com for regional support phone numbers.
> >> >>
> >> >> Any input or comments in this thread are highly appreciated.
> >> >> ======================================================
> >> >> This posting is provided "AS IS" with no warranties, and confers no
> >> rights.
> >> >>
> >> >> --------------------
> >> >> >From: "Gary V." <salarmy@xxxxxxxxxxxx>
> >> >> >Newsgroups: microsoft.public.windows.server.sbs
> >> >> >Subject: Re: GP settings questions?
> >> >> >Date: 19 Aug 2005 10:00:15 -0700
> >> >> >Organization: http://groups.google.com
> >> >> >Lines: 8
> >> >> >Message-ID: <1124470815.100844.303480@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
> >> >> >References: <1124392537.340000.295790@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
> >> >> > <5KGCZ#IpFHA.940@xxxxxxxxxxxxxxxxxxxxx>
> >> >> >NNTP-Posting-Host: 208.53.87.254
> >> >> >Mime-Version: 1.0
> >> >> >Content-Type: text/plain; charset="iso-8859-1"
> >> >> >X-Trace: posting.google.com 1124470820 2802 127.0.0.1 (19 Aug 2005
> >> >> 17:00:20 GMT)
> >> >> >X-Complaints-To: groups-abuse@xxxxxxxxxx
> >> >> >NNTP-Posting-Date: Fri, 19 Aug 2005 17:00:20 +0000 (UTC)
> >> >> >In-Reply-To: <5KGCZ#IpFHA.940@xxxxxxxxxxxxxxxxxxxxx>
> >> >> >User-Agent: G2/0.2
> >> >> >Complaints-To: groups-abuse@xxxxxxxxxx
> >> >> >Injection-Info: o13g2000cwo.googlegroups.com;
> >> posting-host=208.53.87.254;
> >> >> > posting-account=FbCvfA0AAACjuAQLB1cdUV3g5WbrHvTY
> >> >> >Path:
> >> >>
> >>
> TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
> >> >>
> >>
> ne.de!border2.nntp.dca.giganews.com!nntp.giganews.com!news.glorb.com!postnew
> >> >> s.google.com!o13g2000cwo.googlegroups.com!not-for-mail
> >> >> >Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.windows.server.sbs:145983
> >> >> >X-Tomcat-NG: microsoft.public.windows.server.sbs
> >> >> >
> >> >> >Very good I can do that. However Let me reexplain my first
> question...
> >> >> >I can make gp in the workstation, server, and notebook OU but how do
> I
> >> >> >make the workstation OU only rollout to workstations, the server OU
> >> >> >only affect my SBS server and not the workstations and so on?
> >> >> >
> >> >> >Thanks for your time and help
> >> >> >Gary V.
> >> >> >
> >> >> >
> >> >
> >> >
> >
> >

.

Relevant Pages

  • Re: GP settings questions?
    ... SBSComputers OU, and find the user config admin template GP is not taking ... This newsgroup only focuses on SBS technical issues. ... you may want to contact Microsoft CSS directly. ... >> can define the specific OU container, and link the specific Group Policy ...
    (microsoft.public.windows.server.sbs)
  • RE: Folder rediredtion problem
    ... This problem may occur if the Group Policy engine or Active ... Please open Control Panel -> network connections. ... This newsgroup only focuses on SBS technical issues. ... you may want to contact Microsoft CSS directly. ...
    (microsoft.public.windows.server.sbs)
  • RE: Folder rediredtion problem
    ... This problem may occur if the Group Policy engine or Active ... Please open Control Panel -> network connections. ... This newsgroup only focuses on SBS technical issues. ... you may want to contact Microsoft CSS directly. ...
    (microsoft.public.windows.server.sbs)
  • Re: My Documents on Server?
    ... narrow down the issue more clearly, we need to get all your group policy, ... It seems only the my documents redirection setting on back up node, ... This newsgroup only focuses on SBS technical issues. ... you may want to contact Microsoft CSS directly. ...
    (microsoft.public.windows.server.sbs)
  • Re: Confused by DST
    ... the servers) and have them manually fix any calendar issues. ... This newsgroup only focuses on SBS technical issues. ... you may want to contact Microsoft CSS directly. ...
    (microsoft.public.exchange.admin)