[windows2000] Re: GPO
- From: Bill Beckett <Bill.beckett@xxxxxxxxxxxxxxxxx>
- To: "'windows2000@xxxxxxxxxxxxx'" <windows2000@xxxxxxxxxxxxx>
- Date: Thu, 7 Oct 2004 16:12:58 -0400
Well I thought I understood it but it's not working so maybe I don't. Here's
what I've got...2K domain, default domain policy. With more and more users
using Citrix, I want to move the Terminal Server boxes into another OU so
that different policies apply. I've got a test box in an OU called Terminal
Servers. I have created a new Group Policy for the Terminal Server OU. I
have enabled loopback processing and have configured a logon script for that
GP. However, when I login in to the test Terminal Server, the logon script
does not run/apply. What could I be doing wrong?
-----Original Message-----
From: James Lilly [mailto:LillyJ@xxxxxxxxxxx]
Sent: Thursday, October 07, 2004 3:57 PM
To: windows2000@xxxxxxxxxxxxx; Bill.beckett@xxxxxxxxxxxxxxxxx
Subject: [windows2000] Re: GPO
Yes, that's correct, they would apply, but only when the user logs into a
server in the TS OU, which, I'm assuming, is what you are after.
Correct?
Also, if you want the TS OU Group Policy settings to apply all the time
(regardless of the settings users get from other policies elsewhere), you'll
probably want to configure Loopback in the Replace mode.
Hope this helps;
James
>>> Bill.beckett@xxxxxxxxxxxxxxxxx 10/7/2004 3:35:04 PM >>>
If I use loopback processing on the TS OU then user settings would apply,
correct?
-----Original Message-----
From: James Lilly [mailto:LillyJ@xxxxxxxxxxx]
Sent: Thursday, October 07, 2004 3:09 PM
To: windows2000@xxxxxxxxxxxxx; Bill.beckett@xxxxxxxxxxxxxxxxx
Subject: [windows2000] Re: GPO
GP applies in the following order: Local policy, Site, Domain, OU (in order
of OU nesting)
So, if you have settings lower in the hierarchy, they overwrite ones above
(unless you Block Inheritance or set the No Override options)
Now, these overwrites are on a setting by setting basis, depending on what
settings are applied.
Therefore, you are correct, the settings just apply to the computer, unless
you use loopback processing, in which case those Group Policy settings CAN
apply to the users, but only when they log into the Terminal Server.
Did that help make it clear as mud? :)
James
>>> Bill.beckett@xxxxxxxxxxxxxxxxx 10/7/2004 2:50:00 PM >>>
Group Policy clarification please. If I have a default and also have a
Terminal Server OU with its own group policy, do changes under the User
Configuration apply if only the terminal server is under that OU?
Example...
OU=Terminal Server
Object=Citrix Server
There are no users under the Terminal Server OU. Does the GPO linked to the
Terminal Server OU affect computer configuration only?
********************************************************
This Weeks Sponsor StressedPuppy.com Games
Feeling stressed out? Check out our games to
relieve your stress.
http://www.StressedPuppy.com
********************************************************
To Unsubscribe, set digest or vacation
mode or view archives use the below link.
http://thethin.net/win2000list.cfm
********************************************************
This Weeks Sponsor StressedPuppy.com Games
Feeling stressed out? Check out our games to
relieve your stress.
http://www.StressedPuppy.com
********************************************************
To Unsubscribe, set digest or vacation
mode or view archives use the below link.
http://thethin.net/win2000list.cfm
********************************************************
This Weeks Sponsor StressedPuppy.com Games
Feeling stressed out? Check out our games to
relieve your stress.
http://www.StressedPuppy.com
********************************************************
To Unsubscribe, set digest or vacation
mode or view archives use the below link.
http://thethin.net/win2000list.cfm
********************************************************
This Weeks Sponsor StressedPuppy.com Games
Feeling stressed out? Check out our games to
relieve your stress.
http://www.StressedPuppy.com
********************************************************
To Unsubscribe, set digest or vacation
mode or view archives use the below link.
http://thethin.net/win2000list.cfm
Other related posts:
