[THIN] Re: GPO Question

  • From: "Jeff Pitsch" <jepitsch@xxxxxxxxx>
  • To: thin@xxxxxxxxxxxxx
  • Date: Sat, 22 Dec 2007 11:37:06 -0500

Nope that's why they are called machine policies.  They apply to the
 machine not the users.  The user portion of the gpo applies to the users
not the machine.

On Dec 22, 2007 11:29 AM, Jon Luchette <jon.e.luchette@xxxxxxxxx> wrote:

> ok thanks!  so I cannot have different machine policies for different
> groups of users?
>
> On 12/22/07, Greg Reese <gareese@xxxxxxxxx> wrote:
> > computer settings will apply for everyone, user settings will apply to
> each
> > group.
> >
> > I usually setup mine similar. it works pretty well.  For the sake of
> staying
> > organized, I try to keep all the machine policies in a single place.
> >
> > also, don't mess with domain admins when setting permissions on these.
>  Make
> > a separate group.  I have locked myself out of things many times by
> screwing
> > up the permissions on a gpo and the domain admins group.
> >
> >
> > On 12/21/07, Jon Luchette <jon.e.luchette@xxxxxxxxx> wrote:
> > >
> > > I have one group of 3 citrix servers.  I have created a separate OU
> > > for citrix servers and moved all 3 computer accounts into it. what I
> > > want to do is enforce two policies at this level. one for admins and
> > > one for non admins.if I create  one policy for admins and set the read
> > > and apply group policy permission for their geoup in AD, and do the
> > > same for the non admins with another policy, will both groups apply
> > > their own user and computer settings or will just their user settings
> > > be unique?
> > >
> > > On 12/21/07, Greg Reese <gareese@xxxxxxxxx> wrote:
> > > > seperate the machines by OU and only link the policies you want
> applied
> > > to
> > > > OU you want them applied to.
> > > >
> > > >
> > > >
> > > >
> > > > On 12/21/07, Jon Luchette <jon.e.luchette@xxxxxxxxx> wrote:
> > > > >
> > > > > I want to enable different computer configuration settings for
> > > different
> > > > > groups of users in AD on some 2003 terminal servers.  Is that
> > > possible?
> > > > > How?  I know about loopback and everything, but that is mostly
> > > controlling
> > > > > how the user level GPOs are applied...
> > > >
> > > ************************************************
> > > For Archives, RSS, to Unsubscribe, Subscribe or
> > > set Digest or Vacation mode use the below link:
> > > //www.freelists.org/list/thin
> > > ************************************************
> > >
> >
> ************************************************
> For Archives, RSS, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:
> //www.freelists.org/list/thin
> ************************************************
>

Other related posts: