computer settings will apply for everyone, user settings will apply to each group. I usually setup mine similar. it works pretty well. For the sake of staying organized, I try to keep all the machine policies in a single place. also, don't mess with domain admins when setting permissions on these. Make a separate group. I have locked myself out of things many times by screwing up the permissions on a gpo and the domain admins group. On 12/21/07, Jon Luchette <jon.e.luchette@xxxxxxxxx> wrote: > > I have one group of 3 citrix servers. I have created a separate OU > for citrix servers and moved all 3 computer accounts into it. what I > want to do is enforce two policies at this level. one for admins and > one for non admins.if I create one policy for admins and set the read > and apply group policy permission for their geoup in AD, and do the > same for the non admins with another policy, will both groups apply > their own user and computer settings or will just their user settings > be unique? > > On 12/21/07, Greg Reese <gareese@xxxxxxxxx> wrote: > > seperate the machines by OU and only link the policies you want applied > to > > OU you want them applied to. > > > > > > > > > > On 12/21/07, Jon Luchette <jon.e.luchette@xxxxxxxxx> wrote: > > > > > > I want to enable different computer configuration settings for > different > > > groups of users in AD on some 2003 terminal servers. Is that > possible? > > > How? I know about loopback and everything, but that is mostly > controlling > > > how the user level GPOs are applied... > > > ************************************************ > For Archives, RSS, to Unsubscribe, Subscribe or > set Digest or Vacation mode use the below link: > //www.freelists.org/list/thin > ************************************************ >