John- Best thing to do is use security group filtering on your GPO to exclude those servers. You can either remove the Authenticated Users ACE from the GPO and then grant Read and Apply Group Policy permissions to the computer or user groups you wish the GPO to apply to or you can put your few servers in a computer group and add a Read Deny ACE for that group to the GPO.
Darren CTO, Quest MS stuff -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Parker Sent: Monday, November 03, 2003 3:34 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Group policy Hey all, I have a few servers that authenticate to my active directory, but I do not want the group policy to affect them. How can I accomplish this? John Parker, MCSE IS Admin. Senior Technical Specialist Digital Display Systems. Alpha Video 7711 Computer Ave. Edina, MN. 55435 952-896-9898 Local 800-388-0008 Watts 952-896-9899 Fax 612-804-8769 Cell 952-841-3327 Direct [EMAIL PROTECTED] "Be excellent to each other" ---End of Line--- -----Original Message----- From: Free, Bob [mailto:[EMAIL PROTECTED] Sent: Monday, November 03, 2003 5:18 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] LDAP wright to certains accounts not happening. Sounds like adminSDholder at work -----Original Message----- From: Myrick, Todd (NIH/CIT) [mailto:[EMAIL PROTECTED] Sent: Monday, November 03, 2003 10:30 AM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] LDAP wright to certains accounts not happening. What is interesting is these accounts are a member of Domain Administrator. Also the permissions didn't propagate down to the child objects that are in the Domain Administrator group. They propagated down to other objects child user objects though in the users container. I went in an manually added the permissions to one of the accounts, and the LDAP write operation still fails. Does anyone know if this is by design via the LDAP interface? They developer isn't using ADSI. Thanks, Todd Myrick List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
