Re: Set GPO for specific user group

OK, now the new GPO (MCA_RWW) is listed, but the ie homepage is still set to
companyweb, rather than companyweb/mca:


Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\billw>gpresult

Microsoft (R) Windows (R) XP Operating System Group Policy Result too
Copyright (C) Microsoft Corp. 1981-2001

Created On 5/15/2008 at 11:57:12 AM


RSOP results for LIGHTSHIPGROUP\billw on MCAPC01 : Logging Mode
----------------------------------------------------------------

OS Type: Microsoft Windows XP Professional
OS Configuration: Member Workstation
OS Version: 5.1.2600
Domain Name: LIGHTSHIPGROUP
Domain Type: Windows 2000
Site Name: MainOffice
Roaming Profile:
Local Profile: C:\Documents and Settings\billw
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
CN=MCAPC01,OU=SBSComputers,OU=Computers,OU=MyBusiness,DC=lightshi
ocal
Last time Group Policy was applied: 5/15/2008 at 11:55:23 AM
Group Policy was applied from: LSGSBS.lightshipgroup.local
Group Policy slow link threshold: 500 kbps

Applied Group Policy Objects
-----------------------------
Small Business Server Domain Password Policy
Small Business Server Windows Firewall
Small Business Server Client Computer
Small Business Server Remote Assistance Policy
Small Business Server Lockout Policy
Default Domain Policy
Small Business Server Update Services Client Computers Policy
Small Business Server Update Services Common Settings Policy

The following GPOs were not applied because they were filtered ou
-----------------------------------------------------------------
Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2

Small Business Server Folder Redirection
Filtering: Not Applied (Empty)

Local Group Policy
Filtering: Not Applied (Empty)

The computer is a part of the following security groups:
--------------------------------------------------------
BUILTIN\Administrators
Everyone
MCAPC01 Admins
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
MCAPC01$
Domain Computers


USER SETTINGS
--------------
CN=Bill Watts,OU=SBSUsers,OU=Users,OU=MyBusiness,DC=lightshipgrou
Last time Group Policy was applied: 5/15/2008 at 11:56:43 AM
Group Policy was applied from: LSGSBS.lightshipgroup.local
Group Policy slow link threshold: 500 kbps

Applied Group Policy Objects
-----------------------------
Show Desktop Icons
Small Business Server Folder Redirection
Small Business Server Domain Password Policy
Default Domain Policy
MCA_RWW

The following GPOs were not applied because they were filtered ou
-----------------------------------------------------------------
Small Business Server Client Computer
Filtering: Not Applied (Empty)

Small Business Server Update Services Common Settings Policy
Filtering: Not Applied (Empty)

Local Group Policy
Filtering: Not Applied (Empty)

Small Business Server Lockout Policy
Filtering: Disabled (GPO)

Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2

Small Business Server Remote Assistance Policy
Filtering: Disabled (GPO)

Small Business Server Windows Firewall
Filtering: Not Applied (Empty)

The user is a part of the following security groups:
----------------------------------------------------
Domain Users
Everyone
BUILTIN\Users
Remote Desktop Users
BUILTIN\Administrators
REMOTE INTERACTIVE LOGON
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
SBS Internet Users
Web Workplace Users
Limited Users Group

C:\Documents and Settings\billw>

"Costas" <cpstechgroup@xxxxxxxxx> wrote in message
news:%23Y5J9GqtIHA.4912@xxxxxxxxxxxxxxxxxxxxxxx
Susan,

Do this. Create the GPO by clicking on the domain name (domain.local) and
selecting 'create and link a gpo here'. Then go to MyBusiness OU, and
under 'Users' create a new OU. Right click on the new OU and select link
an existing GPO. Link the GPO you created here.

Click on the GPO and add the security group you want the GPO to apply to.
Remove the 'Authenticated Users' group. From the workstation run gpupdate
at the command prompt.

See if that helps. If not, run gpresults again and see if the OU is
listed and whether is applied or not

--
Costas


"SusanV" <s@xxxxx> wrote in message
news:OVdlF1ptIHA.4260@xxxxxxxxxxxxxxxxxxxxxxx
Thanks for your help - I know I'm doing somethign incredibly stupid!
Hmmm, nope not listed - the new OU is MCA and the new GPO is called MCA
Limited Users, with Security Filtering set to only the Limimted Users
Group (which BillW is a member of) :

USER SETTINGS
--------------
CN=Bill
Watts,OU=SBSUsers,OU=Users,OU=MyBusiness,DC=lightshipgroup,DC=local
Last time Group Policy was applied: 5/15/2008 at 11:00:47 AM
Group Policy was applied from: LSGSBS.lightshipgroup.local
Group Policy slow link threshold: 500 kbps

Applied Group Policy Objects
-----------------------------
Show Desktop Icons
Small Business Server Folder Redirection
Small Business Server Domain Password Policy
Default Domain Policy

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Small Business Server Windows Firewall
Filtering: Not Applied (Empty)

Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2

Small Business Server Update Services Common Settings Policy
Filtering: Not Applied (Empty)

Small Business Server Lockout Policy
Filtering: Disabled (GPO)

Local Group Policy
Filtering: Not Applied (Empty)

Small Business Server Client Computer
Filtering: Not Applied (Empty)

Small Business Server Remote Assistance Policy
Filtering: Disabled (GPO)

The user is a part of the following security groups:
----------------------------------------------------
Domain Users
Everyone
BUILTIN\Users
Remote Desktop Users
BUILTIN\Administrators
REMOTE INTERACTIVE LOGON
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
SBS Internet Users
Web Workplace Users
Limited Users Group

"Costas" <cpstechgroup@xxxxxxxxx> wrote in message
news:eXZUCRptIHA.1236@xxxxxxxxxxxxxxxxxxxxxxx
Go to the command prompt of a workstation logged in as a user of the new
group, and run: gpresult /r

Is the new GPO applied to the user? If not, try running: gpupdate /force
and check again to see if the GPO is applied

--
Costas


"SusanV" <s@xxxxx> wrote in message
news:uaU8w3otIHA.2068@xxxxxxxxxxxxxxxxxxxxxxx
hi all,

We have a user group defined for certain folks who connect via RWW
only, who need certain policies applied:
1. Force logoff after idle
2. Change IE homepage from company web
3. Specific file/folder auditing

I created a new OU and GPO (setting just the IE homepage for now),
linked the GPO to the OU, set teh OU to the group, verified the new GPO
is the first item in the OU Precedence list. The IE homepage is still
set to companyweb for the users in the group (applied via Default
Domain Policy).

Then I set the OU to Block Inheritance, but still no joy.

What am I missing or doing wrong? Searching the web I see lots of
references to setting a no Override, but cannot find this option?

TIA,
SusanV









.

Relevant Pages