Windows Forum

Ask something
Discussion Locked

Group Policy Problem

0 helpful
7 replies

by giacomo.dagostino

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Problem, I created a group called GR-MSNOFF that will include members which will not be allowed to run MSN messenger. The policy is applied in a structured Org unit called SoftwareRestrictions and then a sub Org Unit called MsnRemoval. The policy is configured in the Org Unit called MsnRemoval. The problem I'm having is that the policy doesn't work for the members that are in the GR-MsnOff group I created but it does work if I put an individual user in that MsnRemoval Org Unit. Therefore, in the MsnRemoval Org Unit there is a Group (GR-msnoff) and a user (testuser), the policy works with the user but not with the rest of the users that are members of the group. Anyone know a work around this problem. I know their could be a problem with group permissions but I'm asking myself whats the best way to go about this. Any Suggestions?

tks

Giacomo

7 replies

by mikel~t

You can't apply group policies to groups...only to Organizational units.

If you want to apply a policy to some users, and not others, create a seperate OU and put the users in that OU. If you don't want to create a new OU, add the Group Policy to the current OU, and allow Read and Apply group policy permissions only to the users you want the policy to apply to.

Hope this helps.

Mike

by voldar

Simply add the MSNOFF group to the MSNREMOVAL organizational unit, and all is going to be right and smooth. The problem is that you apply GroupPolicies only to OU level, not groups!

This discussion is closed to new replies.