Hi Mario
Short of using Loopback, user GPOs apply on all users inside the OU at
which the GPO is applied. IE:
OU1 ->GPO1
OU2 -> GPO2
User 1 is in OU1
User 2 is in OU2
User1 will then get the GPO1 regardless where he logs in from because his
user account is in OU1. User2 will always get GPO2 for the same reason.
Regards;
James R. Day
Active Directory Core Team
Office of the Chief Information Officer
National Park Service
(202) 354-1464 (direct)
(202) 371-1549 (fax)
[EMAIL PROTECTED]
|---------+---------------------------------->
| | "Rosales, Mario" |
| | <[EMAIL PROTECTED]> |
| | Sent by: |
| | [EMAIL PROTECTED]|
| | tivedir.org |
| | |
| | |
| | 11/12/2004 08:52 AM CST|
| | Please respond to |
| | ActiveDir |
|---------+---------------------------------->
>------------------------------------------------------------------------------------------------------------------------------|
|
|
| To: "'[EMAIL PROTECTED]'"
<[EMAIL PROTECTED]> |
| cc: (bcc: James Day/Contractor/NPS)
|
| Subject: RE: [ActiveDir] OU and Policies
|
>------------------------------------------------------------------------------------------------------------------------------|
I was expecting that but I guess it did not work that way. What if I just
add another user policy under that OU with those setting set to something
different? That will override correct?
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al
Sent: Friday, November 12, 2004 8:33 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OU and Policies
Ok. Did you not expect the user policy to still apply? The user is not in
OU2.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rosales, Mario
Sent: Friday, November 12, 2004 9:26 AM
To: Rosales, Mario; '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] OU and Policies
This is the correction
MAINOU->OU1
MAINOU->OU2 <-Block Policy Inheritance)
MAINOUT-> USER POLICY (Lock Down ScreenSaver Settin
MAINOUT-> COMPUTER POLICY(Other Policy Settings) Enforced
user1 in OU1
Computer1 in ou2
When user1 logs in - the settings of User Policy still apply.
-----Original Message-----
From: Rosales, Mario
Sent: Friday, November 12, 2004 8:25 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] OU and Policies
Correction
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rosales, Mario
Sent: Friday, November 12, 2004 8:06 AM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] OU and Policies
Ok have a question hopefully some of you out there could help me out.
We have
MAINOU->OU1
MAINOU->OU2 <-Block Policy Inheritance)
MAINOUT-> USER POLICY (Lock Down ScreenSaver Settin COMPUTER POLICY
MAINOUT-> (Other Policy Settings) Enforced
user1 in OU1
Computer1 in ou2
When user1 logs in - the settings of User Policy still apply.
Am I doing something wrong?
Hope that makes sense
Thanks,
Mario
***************************************************************************
The contents of this communication are intended only for the addressee and
may contain confidential and/or privileged material. If you are not the
intended recipient, please do not read, copy, use or disclose this
communication and notify the sender. Opinions, conclusions and other
information in this communication that do not relate to the official
business of my company shall be understood as neither given nor endorsed by
it.
***************************************************************************
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
***************************************************************************
The contents of this communication are intended only for the addressee and
may contain confidential and/or privileged material. If you are not the
intended recipient, please do not read, copy, use or disclose this
communication and notify the sender. Opinions, conclusions and other
information in this communication that do not relate to the official
business of my company shall be understood as neither given nor endorsed by
it.
***************************************************************************
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
***************************************************************************
The contents of this communication are intended only for the addressee and
may contain confidential and/or privileged material. If you are not the
intended recipient, please do not read, copy, use or disclose this
communication and notify the sender. Opinions, conclusions and other
information in this communication that do not relate to the official
business of my company shall be understood as neither given nor endorsed by
it.
***************************************************************************
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
