[gptalk] Re: Applying user settings to a computer.

  • From: "Nelson, Jamie" <Jamie.Nelson@xxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Mon, 30 Jun 2008 15:35:18 -0500

It will work, but those computer accounts will have to have rights to
the GPO as well. In addition to them being in their own OU, you'll want
to put them in a security group and add that group to the filtering
section as well.

 

Jamie Nelson | Infrastructure Consultant | BI&T Operations | Devon
Energy | Work: 405.552.8054 | http://www.dvn.com <http://www.dvn.com/> 

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Kevin Gay
Sent: Monday, June 30, 2008 3:26 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Applying user settings to a computer.

 

Now I've got a somewhat convoluted problem. I have these special kiosk
machines in their own OU and they have a domain user service account,
this account is secured. My issue is I need to apply some settings to a
certain security group if they log onto these machines, however these
settings can only be for these machines, not their normal work
computers. Can I apply user settings to the OU containing the machines
and then filter it to the security group and turn on loopback processing
and this work? I'm thinking through it and believe that the loopback
wouldn't take effect because its looping back on the user via the
computer, so if the computer can apply the loopback gpo then any user
that logs in will get those settings as it's the computer looking at the
GPO not the user. Ideas?

 

 


Confidentiality Warning: This message and any attachments are intended only for 
the use of the intended recipient(s), are confidential, and may be privileged. 
If you are not the intended recipient, you are hereby notified that any review, 
retransmission, conversion to hard copy, copying, circulation or other use of 
all or any portion of this message and any attachments is strictly prohibited. 
If you are not the intended recipient, please notify the sender immediately by 
return e-mail, and delete this message and any attachments from your system. 

Other related posts: