Re: Set GPO for specific user group
- From: "Costas" <cpstechgroup@xxxxxxxxx>
- Date: Thu, 15 May 2008 12:35:07 -0400
Click on the domain name (domain.local) in Group Policy Management, select the GPO and then click the arrow to the left to move it to the top of the list
--
Costas
"SusanV" <s@xxxxx> wrote in message news:upYR0SqtIHA.3804@xxxxxxxxxxxxxxxxxxxxxxx
OK, now the new GPO (MCA_RWW) is listed, but the ie homepage is still set to companyweb, rather than companyweb/mca:
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.
C:\Documents and Settings\billw>gpresult
Microsoft (R) Windows (R) XP Operating System Group Policy Result too
Copyright (C) Microsoft Corp. 1981-2001
Created On 5/15/2008 at 11:57:12 AM
RSOP results for LIGHTSHIPGROUP\billw on MCAPC01 : Logging Mode
----------------------------------------------------------------
OS Type: Microsoft Windows XP Professional
OS Configuration: Member Workstation
OS Version: 5.1.2600
Domain Name: LIGHTSHIPGROUP
Domain Type: Windows 2000
Site Name: MainOffice
Roaming Profile:
Local Profile: C:\Documents and Settings\billw
Connected over a slow link?: No
COMPUTER SETTINGS
------------------
CN=MCAPC01,OU=SBSComputers,OU=Computers,OU=MyBusiness,DC=lightshi
ocal
Last time Group Policy was applied: 5/15/2008 at 11:55:23 AM
Group Policy was applied from: LSGSBS.lightshipgroup.local
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
-----------------------------
Small Business Server Domain Password Policy
Small Business Server Windows Firewall
Small Business Server Client Computer
Small Business Server Remote Assistance Policy
Small Business Server Lockout Policy
Default Domain Policy
Small Business Server Update Services Client Computers Policy
Small Business Server Update Services Common Settings Policy
The following GPOs were not applied because they were filtered ou
-----------------------------------------------------------------
Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2
Small Business Server Folder Redirection
Filtering: Not Applied (Empty)
Local Group Policy
Filtering: Not Applied (Empty)
The computer is a part of the following security groups:
--------------------------------------------------------
BUILTIN\Administrators
Everyone
MCAPC01 Admins
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
MCAPC01$
Domain Computers
USER SETTINGS
--------------
CN=Bill Watts,OU=SBSUsers,OU=Users,OU=MyBusiness,DC=lightshipgrou
Last time Group Policy was applied: 5/15/2008 at 11:56:43 AM
Group Policy was applied from: LSGSBS.lightshipgroup.local
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
-----------------------------
Show Desktop Icons
Small Business Server Folder Redirection
Small Business Server Domain Password Policy
Default Domain Policy
MCA_RWW
The following GPOs were not applied because they were filtered ou
-----------------------------------------------------------------
Small Business Server Client Computer
Filtering: Not Applied (Empty)
Small Business Server Update Services Common Settings Policy
Filtering: Not Applied (Empty)
Local Group Policy
Filtering: Not Applied (Empty)
Small Business Server Lockout Policy
Filtering: Disabled (GPO)
Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2
Small Business Server Remote Assistance Policy
Filtering: Disabled (GPO)
Small Business Server Windows Firewall
Filtering: Not Applied (Empty)
The user is a part of the following security groups:
----------------------------------------------------
Domain Users
Everyone
BUILTIN\Users
Remote Desktop Users
BUILTIN\Administrators
REMOTE INTERACTIVE LOGON
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
SBS Internet Users
Web Workplace Users
Limited Users Group
C:\Documents and Settings\billw>
"Costas" <cpstechgroup@xxxxxxxxx> wrote in message news:%23Y5J9GqtIHA.4912@xxxxxxxxxxxxxxxxxxxxxxxSusan,
Do this. Create the GPO by clicking on the domain name (domain.local) and selecting 'create and link a gpo here'. Then go to MyBusiness OU, and under 'Users' create a new OU. Right click on the new OU and select link an existing GPO. Link the GPO you created here.
Click on the GPO and add the security group you want the GPO to apply to. Remove the 'Authenticated Users' group. From the workstation run gpupdate at the command prompt.
See if that helps. If not, run gpresults again and see if the OU is listed and whether is applied or not
--
Costas
"SusanV" <s@xxxxx> wrote in message news:OVdlF1ptIHA.4260@xxxxxxxxxxxxxxxxxxxxxxxThanks for your help - I know I'm doing somethign incredibly stupid!
Hmmm, nope not listed - the new OU is MCA and the new GPO is called MCA Limited Users, with Security Filtering set to only the Limimted Users Group (which BillW is a member of) :
USER SETTINGS
--------------
CN=Bill Watts,OU=SBSUsers,OU=Users,OU=MyBusiness,DC=lightshipgroup,DC=local
Last time Group Policy was applied: 5/15/2008 at 11:00:47 AM
Group Policy was applied from: LSGSBS.lightshipgroup.local
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
-----------------------------
Show Desktop Icons
Small Business Server Folder Redirection
Small Business Server Domain Password Policy
Default Domain Policy
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Small Business Server Windows Firewall
Filtering: Not Applied (Empty)
Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2
Small Business Server Update Services Common Settings Policy
Filtering: Not Applied (Empty)
Small Business Server Lockout Policy
Filtering: Disabled (GPO)
Local Group Policy
Filtering: Not Applied (Empty)
Small Business Server Client Computer
Filtering: Not Applied (Empty)
Small Business Server Remote Assistance Policy
Filtering: Disabled (GPO)
The user is a part of the following security groups:
----------------------------------------------------
Domain Users
Everyone
BUILTIN\Users
Remote Desktop Users
BUILTIN\Administrators
REMOTE INTERACTIVE LOGON
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
SBS Internet Users
Web Workplace Users
Limited Users Group
"Costas" <cpstechgroup@xxxxxxxxx> wrote in message news:eXZUCRptIHA.1236@xxxxxxxxxxxxxxxxxxxxxxxGo to the command prompt of a workstation logged in as a user of the new group, and run: gpresult /r
Is the new GPO applied to the user? If not, try running: gpupdate /force and check again to see if the GPO is applied
--
Costas
"SusanV" <s@xxxxx> wrote in message news:uaU8w3otIHA.2068@xxxxxxxxxxxxxxxxxxxxxxxhi all,
We have a user group defined for certain folks who connect via RWW only, who need certain policies applied:
1. Force logoff after idle
2. Change IE homepage from company web
3. Specific file/folder auditing
I created a new OU and GPO (setting just the IE homepage for now), linked the GPO to the OU, set teh OU to the group, verified the new GPO is the first item in the OU Precedence list. The IE homepage is still set to companyweb for the users in the group (applied via Default Domain Policy).
Then I set the OU to Block Inheritance, but still no joy.
What am I missing or doing wrong? Searching the web I see lots of references to setting a no Override, but cannot find this option?
TIA,
SusanV
.
- Follow-Ups:
- Re: Set GPO for specific user group
- From: SusanV
- Re: Set GPO for specific user group
- References:
- Set GPO for specific user group
- From: SusanV
- Re: Set GPO for specific user group
- From: Costas
- Re: Set GPO for specific user group
- From: SusanV
- Re: Set GPO for specific user group
- From: Costas
- Re: Set GPO for specific user group
- From: SusanV
- Set GPO for specific user group
- Prev by Date: Re: setup hangs during "registering components" at 13 min mark
- Next by Date: Re: Set GPO for specific user group
- Previous by thread: Re: Set GPO for specific user group
- Next by thread: Re: Set GPO for specific user group
- Index(es):
Relevant Pages
|
