[gptalk] Re: access denied (security filtering)
- From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
- To: <gptalk@xxxxxxxxxxxxx>
- Date: Thu, 13 Mar 2008 18:44:24 -0700
Hi Tan-
Computers that are not part of the domain cannot participate in domain-based
GP at all. However, I'm not clear on what you are saying below. It sounds
like you are saying that users logging into your TS servers are doing so
from machines not in the domain. That is ok as long as they have user
accounts in the domain. In those cases, the loopback GPO (and any other
per-user GPOs that apply to the TS boxes will apply to those user accounts
as long as you are not filtering those users away via group membership (e.g.
by default all users will get per-user loopback policy if you've left
Authenticated Users as the ACE on the GPO).
Darren
-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of tan hs
Sent: Thursday, March 13, 2008 6:39 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: access denied (security filtering)
Hi All,
I think I am having the same problem as Bill. I have my last post on this
tread
"Windows Server 2003 R2 SP2 GPO Access denied (security filtering)" if
you can copy and paste the html at the bottom
you should more clearer picture what Bill is facing.
As Daren said, "....create a group that includes the TS
computers,....", I think it will solve the problem because instead of
putting all TS computers, I tried put in the TS name into the
filtering, yes it works. But question is, not all TS users computers
joined to the domain? I did tried without joining the computer to the
domain and the computer won't appears in the selection list
of the filter. How could we overcome this issue?
Thank you.
Tan
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
************************
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
************************
Other related posts:
