RE: GPO for CTX Servers
- From: "Pierre the French" <PierretheFrench@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Tue, 14 Feb 2006 00:52:27 -0800
hi
first question i thinks it's ok BUT
if you have several Policies, you need read acces for the policy wich should
apply
and SET DENY right fot the policy which should not be applied.
If i can remember it is good to use deny because if you are several policies
applied on the same OU, it can take a long time to process all the policies
(if you not using the deny you will have "fun" with playing the priority
order of the applying policies)
2e question : i only remember that default is authenticated users (the
computer object belongs too), but im not sure
fot me im using and it works
authenticated users
domaincontroller of organisation
system
als default rights for a new policy
then i add
Admins with deny right in order to stay "free"
(One tip, put Deny right but put read/write right too, if not as admin you
couldn't not edit any more the policy ;-] )
so i add ONLY Deny for people wich not receive the policy
each policy have authenticated users with read right
"Simon McDermott" wrote:
Right let me try and explain this one.......
Business Requirement - some users are permitted to have windows search
function and all the rest aren't.
So my implementation is:
An OU with 10 Ctx Servers and linked to it are two GPOs - GPO1(no seaching)
and GPO2, which was copied from GPO1 and then permits searching. Loopback
processing with Replace is enabled in both GPOS
Then there are groups which filter the policy to the relevant security
groups that should get either policy. GRP = GPO1 (read and apply) etc
First question - is this the correct approach?
Second question - i remember reading somewhere that the computer object for
the citrix servers should be added to the security properties of the GPO -
does anyone kno why?
S
- References:
- GPO for CTX Servers
- From: Simon McDermott
- GPO for CTX Servers
- Prev by Date: Only 5 Clients can connect to our TS
- Next by Date: Optimizing VM size
- Previous by thread: GPO for CTX Servers
- Next by thread: Remote Printer Problems
- Index(es):
Relevant Pages
|