[THIN] Re: Need help in overriding machine GPO

Hi
I thought of that but thought it would not work as its a machine policy. Ie The policy applies to server objects, how would I use a Deny on a machine policy?? 

Ang



From: Durf <stygmata@xxxxxxxxx>
Reply-To: thin@xxxxxxxxxxxxx
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Need help in overriding machine GPO
Date: Wed, 22 Nov 2006 14:37:31 -0500

Using the Group Policy Management Console, check out the Security Filtering
for the group policy. You can Deny Access to the users you need to override 
for that policy.
Then create a second policy copied from the first with all the same settings 
but the TS Profile stuff, and again use Security Filtering to apply only to
those concernred users.

This would be the 'canonical' way to do it with GP.

-- Durf

On 11/21/06, Angela Smith <angela_smith9@xxxxxxxxxxx> wrote:


Hi

We use AD group policies extensively and its been used to set User Home
Drives + User Terminal Server profile paths via the PS4 machine GPO.  This
works beautfully for existing 500 users who use Citrix but I now have a
new
requirement where users require Home Drives and Terminal Server Profile
paths to be in a different area (different server).  If these settings
were
set in the AD object in the first place it wouldn't be an issue.  Apart
from
creating a new OU and building new servers  in a new OU (SILOing the
servers
and using different Group Polciies), can anyone think of a way I can
override a Computer GPO if Im logging on to an existing farm?

I could hardcode user profile + TS profiles in the AD objects for existing
users but Id have 500 users to do and I don't rate myself as a scripter to
do this automatically..

Any assistance muchly appreciated

Thanks

_________________________________________________________________
Advertisement: Fresh jobs daily. Stop waiting for the newspaper. Search
now!
www.seek.com.au

http://a.ninemsn.com.au/b.aspx?URL=http%3A%2F%2Fninemsn%2Eseek%2Ecom%2Eau&_t=757263760&_r=Hotmail_EndText_Nov06&_m=EXT

SBC SITES ONLY GOOGLE SEARCH: http://www.F1U.com
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
************************************************





--
--------------
Give a man a match, and he'll be warm for a minute.
But set a man on fire, and he'll be warm for the rest of his life.


_________________________________________________________________
Advertisement: 110,000+ cars with the click of a mouse at carsales.com.au http://a.ninemsn.com.au/b.aspx?URL=http%3A%2F%2Fsecure%2Dau%2Eimrworldwide%2Ecom%2Fcgi%2Dbin%2Fa%2Fci%5F450304%2Fet%5F2%2Fcg%5F801577%2Fpi%5F1005244%2Fai%5F838593&_t=757768878&_r=endtext_110000&_m=EXT
SBC SITES ONLY GOOGLE SEARCH: http://www.F1U.com ************************************************ For Archives, RSS, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: 
http://www.freelists.org/list/thin
************************************************

Other related posts: