[THIN] Re: GPO Question
- From: "Greg Reese" <gareese@xxxxxxxxx>
- To: thin@xxxxxxxxxxxxx
- Date: Sat, 22 Dec 2007 11:41:28 -0500
to add to Jeff, many settings exist in both so depending on what you want to
do, there may be a user policy for it AND a machine policy. I have never
found myself stifled by it when making policies for my Citrix servers. You
can generally layer in just about anything.
On Dec 22, 2007 11:37 AM, Jeff Pitsch <jepitsch@xxxxxxxxx> wrote:
> Nope that's why they are called machine policies. They apply to the
> machine not the users. The user portion of the gpo applies to the users
> not the machine.
>
>
> On Dec 22, 2007 11:29 AM, Jon Luchette < jon.e.luchette@xxxxxxxxx> wrote:
>
> > ok thanks! so I cannot have different machine policies for different
> > groups of users?
> >
> > On 12/22/07, Greg Reese <gareese@xxxxxxxxx> wrote:
> > > computer settings will apply for everyone, user settings will apply to
> > each
> > > group.
> > >
> > > I usually setup mine similar. it works pretty well. For the sake of
> > staying
> > > organized, I try to keep all the machine policies in a single place.
> > >
> > > also, don't mess with domain admins when setting permissions on these.
> > Make
> > > a separate group. I have locked myself out of things many times by
> > screwing
> > > up the permissions on a gpo and the domain admins group.
> > >
> > >
> > > On 12/21/07, Jon Luchette < jon.e.luchette@xxxxxxxxx> wrote:
> > > >
> > > > I have one group of 3 citrix servers. I have created a separate OU
> > > > for citrix servers and moved all 3 computer accounts into it. what I
> > > > want to do is enforce two policies at this level. one for admins and
> >
> > > > one for non admins.if I create one policy for admins and set the
> > read
> > > > and apply group policy permission for their geoup in AD, and do the
> > > > same for the non admins with another policy, will both groups apply
> > > > their own user and computer settings or will just their user
> > settings
> > > > be unique?
> > > >
> > > > On 12/21/07, Greg Reese <gareese@xxxxxxxxx> wrote:
> > > > > seperate the machines by OU and only link the policies you want
> > applied
> > > > to
> > > > > OU you want them applied to.
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > On 12/21/07, Jon Luchette <jon.e.luchette@xxxxxxxxx> wrote:
> > > > > >
> > > > > > I want to enable different computer configuration settings for
> > > > different
> > > > > > groups of users in AD on some 2003 terminal servers. Is that
> > > > possible?
> > > > > > How? I know about loopback and everything, but that is mostly
> > > > controlling
> > > > > > how the user level GPOs are applied...
> > > > >
> > > > ************************************************
> > > > For Archives, RSS, to Unsubscribe, Subscribe or
> > > > set Digest or Vacation mode use the below link:
> > > > //www.freelists.org/list/thin
> > > > ************************************************
> > > >
> > >
> > ************************************************
> > For Archives, RSS, to Unsubscribe, Subscribe or
> > set Digest or Vacation mode use the below link:
> > //www.freelists.org/list/thin
> > ************************************************
> >
>
>
Other related posts:
