[THIN] Re: Need help in overriding machine GPO

I'd agree - computer policies are applied on machine boot and then during a
refresh - so you couldn't have group/user settings based on GPO security.

Angela, I modified a script I had that'd go through an AD and change TS
settings based on OU/Office/Department settings - drop me an email
(andrew.wood@xxxxxxxxxxxxxxxx) if you'd like a copy.


-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Angela Smith
Sent: 23 November 2006 09:25
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Need help in overriding machine GPO

Hi

I thought of that but thought it would not work as its a machine policy.  Ie
The policy applies to server objects, how would I use a Deny on a machine
policy??

Ang


>From: Durf <stygmata@xxxxxxxxx>
>Reply-To: thin@xxxxxxxxxxxxx
>To: thin@xxxxxxxxxxxxx
>Subject: [THIN] Re: Need help in overriding machine GPO
>Date: Wed, 22 Nov 2006 14:37:31 -0500
>
>Using the Group Policy Management Console, check out the Security 
>Filtering for the group policy.  You can Deny Access to the users you 
>need to override for that policy.
>
>Then create a second policy copied from the first with all the same 
>settings but the TS Profile stuff, and again use Security Filtering to 
>apply only to those concernred users.
>
>This would be the 'canonical' way to do it with GP.
>
>-- Durf
>
>On 11/21/06, Angela Smith <angela_smith9@xxxxxxxxxxx> wrote:
>>
>>Hi
>>
>>We use AD group policies extensively and its been used to set User 
>>Home Drives + User Terminal Server profile paths via the PS4 machine 
>>GPO.  This works beautfully for existing 500 users who use Citrix but 
>>I now have a new requirement where users require Home Drives and 
>>Terminal Server Profile paths to be in a different area (different 
>>server).  If these settings were set in the AD object in the first 
>>place it wouldn't be an issue.  Apart from creating a new OU and 
>>building new servers  in a new OU (SILOing the servers and using 
>>different Group Polciies), can anyone think of a way I can override a 
>>Computer GPO if Im logging on to an existing farm?
>>
>>I could hardcode user profile + TS profiles in the AD objects for 
>>existing users but Id have 500 users to do and I don't rate myself as 
>>a scripter to do this automatically..
>>
>>Any assistance muchly appreciated
>>
>>Thanks
>>
>>_________________________________________________________________
>>Advertisement: Fresh jobs daily. Stop waiting for the newspaper. 
>>Search now!
>>www.seek.com.au
>>
>>http://a.ninemsn.com.au/b.aspx?URL=http%3A%2F%2Fninemsn%2Eseek%2Ecom%2
>>Eau&_t=757263760&_r=Hotmail_EndText_Nov06&_m=EXT
>>
>>SBC SITES ONLY GOOGLE SEARCH: http://www.F1U.com
>>************************************************
>>For Archives, RSS, to Unsubscribe, Subscribe or set Digest or Vacation 
>>mode use the below link:
>>http://www.freelists.org/list/thin
>>************************************************
>>
>
>
>
>--
>--------------
>Give a man a match, and he'll be warm for a minute.
>But set a man on fire, and he'll be warm for the rest of his life.

_________________________________________________________________
Advertisement: 110,000+ cars with the click of a mouse at carsales.com.au
http://a.ninemsn.com.au/b.aspx?URL=http%3A%2F%2Fsecure%2Dau%2Eimrworldwide%2
Ecom%2Fcgi%2Dbin%2Fa%2Fci%5F450304%2Fet%5F2%2Fcg%5F801577%2Fpi%5F1005244%2Fa
i%5F838593&_t=757768878&_r=endtext_110000&_m=EXT

SBC SITES ONLY GOOGLE SEARCH: http://www.F1U.com
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or set Digest or Vacation mode
use the below link:
http://www.freelists.org/list/thin
************************************************

SBC SITES ONLY GOOGLE SEARCH: http://www.F1U.com 
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
************************************************

Other related posts: