[THIN] Re: Need help in overriding machine GPO

A quick reference card on GPMC and security filtering:

http://technet2.microsoft.com/WindowsServer/en/library/adbc0b04-2595-48a4-ade5-6cdb6a018e381033.mspx?mfr=true

(link will be wrapped)

-- Durf

On 11/22/06, Durf <stygmata@xxxxxxxxx> wrote:


Using the Group Policy Management Console, check out the Security
Filtering for the group policy.  You can Deny Access to the users you need
to override for that policy.

Then create a second policy copied from the first with all the same
settings but the TS Profile stuff, and again use Security Filtering to apply
only to those concernred users.

This would be the 'canonical' way to do it with GP.

-- Durf

On 11/21/06, Angela Smith <angela_smith9@xxxxxxxxxxx > wrote:
>
> Hi
>
> We use AD group policies extensively and its been used to set User Home
> Drives + User Terminal Server profile paths via the PS4 machine
> GPO.  This
> works beautfully for existing 500 users who use Citrix but I now have a
> new
> requirement where users require Home Drives and Terminal Server Profile
> paths to be in a different area (different server).  If these settings
> were
> set in the AD object in the first place it wouldn't be an issue.  Apart
> from
> creating a new OU and building new servers  in a new OU (SILOing the
> servers
> and using different Group Polciies), can anyone think of a way I can
> override a Computer GPO if Im logging on to an existing farm?
>
> I could hardcode user profile + TS profiles in the AD objects for
> existing
> users but Id have 500 users to do and I don't rate myself as a scripter
> to
> do this automatically..
>
> Any assistance muchly appreciated
>
> Thanks
>
> _________________________________________________________________
> Advertisement: Fresh jobs daily. Stop waiting for the newspaper. Search
> now!
> www.seek.com.au
>
> 
http://a.ninemsn.com.au/b.aspx?URL=http%3A%2F%2Fninemsn%2Eseek%2Ecom%2Eau&_t=757263760&_r=Hotmail_EndText_Nov06&_m=EXT
>
> SBC SITES ONLY GOOGLE SEARCH: http://www.F1U.com
> ************************************************
> For Archives, RSS, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:
> http://www.freelists.org/list/thin
> ************************************************
>



--
--------------
Give a man a match, and he'll be warm for a minute.
But set a man on fire, and he'll be warm for the rest of his life.





--
--------------
Give a man a match, and he'll be warm for a minute.
But set a man on fire, and he'll be warm for the rest of his life.

Other related posts: