You can, but it's better practice to split them off into computer and user policies from an ease of management standpoint. You could do what you are asking, via putting it at the top of your OU structure and using ACL'ing. That's not really good practice due to it potentially being a pain to manage.
It's all down to your design and what you are trying to achieve. How big is your environment and what is your requirement from GPOs? BR Rob -----Original Message----- From: Jared Manhat [mailto:[EMAIL PROTECTED] Sent: 26 July 2004 15:52 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Apply GP to computer account or user account? I see, so you cant just create 1 GPO with BOTH computer settings & user settings. That sux. Jared Manhat Systems Administrator Accutest Laboratories -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray Sent: Monday, July 26, 2004 9:21 AM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Apply GP to computer account or user account? You'll need to apply your Computer GPO to the OUs that contain your computer objects and your User GPO to the OUs that contain your user objects. Note that the computer settings in the GPO will apply to the computer and are not affected by user logon and logoff. Tony ---------- Original Message ---------------------------------- Wrom: QHYUCDDJBLVLMHAALPTCXLYRWTQTIPWIGYOK Reply-To: [EMAIL PROTECTED] Date: Mon, 26 Jul 2004 08:42:44 -0400 I have created 2 GP's, one with User software restrictions and the other with Computer OS configurations. I want them both to be applied when User's log on. If I attach them both to an OU containing users then will the computer GP be applied, or do I need to link the Computer GP to an OU containing computers and the User GP to an OU containing only users? Thanks Jared Manhat Systems Administrator Accutest Laboratories ________________________________________________________________ Sent via the WebMail system at mail.activedir.org List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ This e-mail and the information it contains are confidential and may be privileged. If you have received this e-mail in error please notify the sender immediately and delete the material from any computer. Unless you are the intended recipient, you should not copy this e-mail for any purpose, or disclose its contents to any other person. The MCPS-PRS Alliance is not responsible for the completeness or accuracy of this communication as it has been transmitted over a public network. Whilst the MCPS-PRS Alliance monitors all communications for potential viruses, we accept no responsibility for any loss or damage caused by this e-mail and the information it contains. It is the recipient's responsibility to scan this e-mail and any attachments for viruses. Any e-mails sent to and from the MCPS-PRS Alliance servers may be monitored for quality control and other purposes. The MCPS-PRS Alliance Limited is a limited company registered in England under company number 03444246 whose registered office is at c/o 29-33 Berners Street, London, W1T 3AB. List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
