Windows Forum

Ask something
Discussion Locked

User Policy

0 helpful
12 replies

by glennw

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Would like to make a user and sometimes groups have certain rights.
I have read some acticles on Active diectory Group poicy. But I still don't understand how to effect one user only. Meaning when John Doe logs into the domain he won't be able see IE or network places on his machine.
Does this have anything to do with setting up new Organizational units?

12 replies

by voldar

A big YES! Study a little more, and you should have the answers by yourself.

by glennw

Question will I be able to create an Oranizational unit. As a test with out effecting the default group policy of the Domain.

by cg it

as the first answer said, yes to the your initial question and yes to your question in your comments.

Your almost there: Hint OU or Group and the members and # of members within an OU or Group is specificed by you, the administrator.

by cg it

another hint: create the GP, give it a name, apply it to the OU or Group. Caution, best to keep the # of OUs & Groups & # of GPs to a minimum. Gets to the point where the documentation just to know whos where with what and when can take up multiple 3" 3 ring binders.

by cg it

here's some article from Microsoft Help & Support: 328756 how to apply group policy to user accounts

by cg it

Active Directory Group Policy policy, [not to be mistaken for local group policy] is very granular and provides a LOT of flexibility. As the third suggestion says, GP can be applied at the site, domain or OU [almost a straight quote out of a text book ]. One can apply Group Policy to a # of of users [I term a "grouping"] in an organizational unit [OU] to a specific site, or to an entire domain. As an example: An "OU" named Sales at the Atlanta "site", of ABC World Wide "domain" has one member [user]and GP is set for that "OU" in this case one user. An organizational unit can contain one user, 10 users, 100 users and so on and be labled to fit a companies organizational structure. As an example: Sales, Human Resources, Accounting, head honcho, misfits, and useless dead wood people. User accounts in which GP are to be applied based upon the users needs are placed in these OUs.

by cg it

Group Policy, in essence, is the imposition of configuration settings on collections of users or computers. You apply those configuration settings within a site, domain or OU whether or not those users are in the same group however one can filter GP so that it affects the users in only one group.

by shaunjanzen

Check out these articles from microsoft on Windows 2000 Group policy design. You will find that group policy can only be applied at the Site, domain and OU levels. They cannot be applied to security groups. Users and groups recieve GPO's from the Domain or the OU that they are in. Follow these links for more info.

http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/deployguide/en-us/Default.asp?url=/resources/documentation/windowsserv/2003/all/deployguide/en-us/dmebb_gpu_pxyo.asp

http://www.microsoft.com/technet/prodtechnol/windows2000serv/howto/grpolwt.mspx

Good Luck

This discussion is closed to new replies.