John if you want to make sure these servers never get any GPOs you might put
in the domain, or make it more obvious at a glance what GPOs they are
getting, you can put them in their own OU and block inheritance to that OU.
Yes it is grouping them for GPO application not necessarily administrative
reasons, but IME this is a pretty simple solution to what sounds like a
straight-forward issue for you.
Rich

-----Original Message-----
From: John Parker [mailto:[EMAIL PROTECTED] 
Sent: Monday, November 03, 2003 5:34 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Group policy

Hey all,

I have a few servers that authenticate to my active directory, but I do not
want the group policy to affect them.

How can I accomplish this?

John Parker, MCSE
IS Admin.
Senior Technical Specialist
Digital Display Systems.

Alpha Video
7711 Computer Ave.
Edina, MN. 55435
 
952-896-9898 Local
800-388-0008 Watts
952-896-9899 Fax
612-804-8769 Cell
952-841-3327 Direct

[EMAIL PROTECTED]
"Be excellent to each other"
---End of Line---


-----Original Message-----
From: Free, Bob [mailto:[EMAIL PROTECTED]
Sent: Monday, November 03, 2003 5:18 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] LDAP wright to certains accounts not happening.


Sounds like adminSDholder at work  

-----Original Message-----
From: Myrick, Todd (NIH/CIT) [mailto:[EMAIL PROTECTED] 
Sent: Monday, November 03, 2003 10:30 AM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] LDAP wright to certains accounts not happening.

What is interesting is these accounts are a member of Domain
Administrator.

Also the permissions didn't propagate down to the child objects that are
in the Domain Administrator group.  They propagated down to other
objects child user objects though in the users container.

I went in an manually added the permissions to one of the accounts, and
the LDAP write operation still fails.

Does anyone know if this is by design via the LDAP interface?  They
developer isn't using ADSI.

Thanks,

Todd Myrick


List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
-------APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE-------
PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or
any attachments. This information is strictly confidential and may be
subject to attorney-client privilege. This message is intended only for the
use of the named addressee. If you are not the intended recipient of this
message, unauthorized forwarding, printing, copying, distribution, or using
such information is strictly prohibited and may be unlawful. If you have
received this in error, you should kindly notify the sender by reply e-mail
and immediately destroy this message. Unauthorized interception of this
e-mail is a violation of federal criminal law. Applebee's International,
Inc. reserves the right to monitor and review the content of all messages
sent to and from this e-mail address. Messages sent to or from this e-mail
address may be stored on the Applebee's International, Inc. e-mail system.
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to