General discussion

Locked

Group Policy

By California Dead Head ·
I have a OU called drafting. I have setup a policy that has computer and user configurtation policies enabled. I have placed the Computer accounts for the computers I am trying to restrict into the OU.

When someone sits at the computer called drafting and logs in the Computer settings of the OU are applied but the user sedttings in the OU are not applied. I am trying to restrict access to functions on this community machine that I want users to have on their other machine.

If I put theusers account into the Drafting OU then the policy fully loads user and computer settings. But then the user gets the same restrictions on their full time machine which I do not want.

How do I it up so the both portions of the Group Policy applyto any user that sites at that drafting machine but not when they log into their workstations?

Local security policy is not an option.

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Group Policy

by timwalsh In reply to Group Policy

The short answer is you can't (at least not the way you are trying).

GPOs are applied in this order (from lowest to highest): local computer, site, domain, OU. GPOs applied at higher levels in the process will take precedence over those applied in lower levels (so local security policy wouldn't work anyway unless the computers weren't joined to the domain).

Computer policies are applied to any user that uses a given computer. User policies are applied no matter which computer a user logson to.

The only way I can think of to solve this quandry is to give the users involved 2 user accounts: one as an OU user, and one as a normal domain user.

Hope this helps.

Collapse -

Group Policy

by California Dead Head In reply to Group Policy

Poster rated this answer

Collapse -

Group Policy

by Monice In reply to Group Policy

Yes you can accomplish this by useing Loopback processing of group policy.

See Microsoft Knowledgebase Article 231287.

Collapse -

Group Policy

by California Dead Head In reply to Group Policy

Thanks your the Man

Collapse -

Group Policy

by California Dead Head In reply to Group Policy

This question was closed by the author

Back to Windows Forum
5 total posts (Page 1 of 1)  

Related Discussions

Related Forums