[gptalk] Re: computers GPO filtered according to users group

  • From: "Annick Delanaye" <Annick.Delanaye@xxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Mon, 30 Jun 2008 16:14:16 +0200

OK !

Thanks !

Annick

-----Message d'origine-----
De : gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] De la
part de Nelson, Jamie
Envoyé : lundi 30 juin 2008 15:59
À : gptalk@xxxxxxxxxxxxx
Objet : [gptalk] Re: computers GPO filtered according to users group

That's because the built-in "Authenticated Users" group includes
computer objects. The computer object itself (NT AUTHORITY\SYSTEM) is a
user just like any other as far as Active Directory is concerned.

Regards,

Jamie Nelson | Infrastructure Consultant | BI&T Operations | Devon
Energy | Work: 405.552.8054 | http://www.dvn.com

-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Annick Delanaye
Sent: Monday, June 30, 2008 8:30 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] computers GPO filtered according to users group

Hi,

Group Policies applies to users or to computers depending on two
criteria :

1. the location in the Active Director (OU, ...). : linking to a
container.
2. Security filtering.

And till today, I believed that computer parameters can only be applied
to
computers and that user parameters can only be applied to users : could
you
confirm ? (exception : loopback).

Or the following situation is working : WSUS parameters (in computer
configuration) linked to an OU containing only computers (this is ok...)
but
the security filtering is applied to a group of users : authenticated
users...
And not to a group of computers.

I don't understant how it can work this way.

Thanks for your help.

Annick




***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
by logging into the freelists.org Web interface. Archives for the list
are available at //www.freelists.org/archives/gptalk/
************************
Confidentiality Warning: This message and any attachments are intended only
for the use of the intended recipient(s), are confidential, and may be
privileged. 
If you are not the intended recipient, you are hereby notified that any
review, retransmission, conversion to hard copy, copying, circulation or
other use of all or any portion of this message and any attachments is
strictly prohibited. If you are not the intended recipient, please notify
the sender immediately by return e-mail, and delete this message and any
attachments from your system. 
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
************************

***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at //www.freelists.org/archives/gptalk/
************************

Other related posts: