General discussion

Locked

Windows 2003 Active Directory and GPO

By cwunder3 ·
Does anyone have an easy article on the very basics of setting up AD on Windows 2003? I need to know the easiest way to apply Group Policies to Groups of people.
Thanks

This conversation is currently closed to new comments.

8 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by CG IT In reply to Windows 2003 Active Direc ...

The Quick and the Dirty of Group Policy:

you create containers [OUs] to collect users or computers. You create a Group Policy object [a template of configurations you want the user to have or the computer to have. you then link the GPO [template] to the container [OU].

Collapse -

by cwunder3 In reply to

Poster rated this answer.

Collapse -

by cwunder3 In reply to Windows 2003 Active Direc ...

So do you have to manually add all of the users into the OU or can you add a group of users?

Collapse -

by curlergirl In reply to Windows 2003 Active Direc ...

As already stated, you apply different group policies to different groups of users (or computers) by placing the users in separate Organization Units (OUs). An "OU" is just an object within AD Users and Computers, sort of like a subgroup. All of the objects in AD Users and Computers (Computers, Users, etc.) are OUs. With the AD Users and Computers console open, you simply right click on the domain name and select New/Organizational Unit. Once you create the OU, you can just move your existing users into the unit where you want them. You can click and drag them from one unit to another, or you can right-click on the user, click "Move" and then select the new OU from the list.

Then when you create new users, you create them in the OU where you want them.

When you apply your new group policies, one thing you have to be careful about is whether there are already policies set in the Default Domain group policy object. If this group policy has any settings enabled, these settings will supercede any settings in individually applied group policies, unless you block policy inheritance. The "Block policy inheritance" check box is on the Group Policy tab of the properties of the new OU. (This tab doesn't exist on the default OUs like Users and Computers, as they always inherit the default domain policy settings.)

When you create your various group policies, you then apply them to the OU by adding them on the Group Policy tab in the properties of the OU.

Hope this helps!

Collapse -

by cwunder3 In reply to

Poster rated this answer.

Collapse -

by john.waugh In reply to Windows 2003 Active Direc ...

Download Microst Group Policy Manager
from:
http://www.microsoft.com/downloads/details.aspx?FamilyID=0a6d4c24-8cbd-4b35-9272-dd3cbfc81887&DisplayLang=en
It allows easier configuration

Collapse -

by cwunder3 In reply to

Poster rated this answer.

Collapse -

by cwunder3 In reply to Windows 2003 Active Direc ...

This question was closed by the author

Back to Windows Forum
8 total posts (Page 1 of 1)  

Related Discussions

Related Forums