[gptalk] Re: computers GPO filtered according to users group

That's because the built-in "Authenticated Users" group includes
computer objects. The computer object itself (NT AUTHORITY\SYSTEM) is a
user just like any other as far as Active Directory is concerned.

Regards,

Jamie Nelson | Infrastructure Consultant | BI&T Operations | Devon
Energy | Work: 405.552.8054 | http://www.dvn.com

-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Annick Delanaye
Sent: Monday, June 30, 2008 8:30 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] computers GPO filtered according to users group

Hi,

Group Policies applies to users or to computers depending on two
criteria :

1. the location in the Active Director (OU, ...). : linking to a
container.
2. Security filtering.

And till today, I believed that computer parameters can only be applied
to
computers and that user parameters can only be applied to users : could
you
confirm ? (exception : loopback).

Or the following situation is working : WSUS parameters (in computer
configuration) linked to an OU containing only computers (this is ok...)
but
the security filtering is applied to a group of users : authenticated
users...
And not to a group of computers.

I don't understant how it can work this way.

Thanks for your help.

Annick




***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
by logging into the freelists.org Web interface. Archives for the list
are available at http://www.freelists.org/archives/gptalk/
************************
Confidentiality Warning: This message and any attachments are intended only for 
the use of the intended recipient(s), are confidential, and may be privileged. 
If you are not the intended recipient, you are hereby notified that any review, 
retransmission, conversion to hard copy, copying, circulation or other use of 
all or any portion of this message and any attachments is strictly prohibited. 
If you are not the intended recipient, please notify the sender immediately by 
return e-mail, and delete this message and any attachments from your system. 
***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at http://www.freelists.org/archives/gptalk/
************************

Other related posts: