Well, it seems pretty flexible to me, and after I got some Group Policy
experience, it even started to make a lot of sense. You apply one or more
group policies to an OU (which can contain computers or users). If you wish
to specify an exception to a particular policy/OU combination, you can
permit or deny access to a group policy via an individual account permission
or security group permissions setting.
To apply a group policy to a specific computer, make a new group policy on
the computer's (or even domain's) OU, then click on properties and remove
the read permissions on that group policy for Authenticated Users (which are
there by default). Then you add read permissions to a specific computer
account (or security group, or whatever).
There's dozens of books out about group policy, check out Amazon to get a
good list.
-ryan-
-----Original Message-----
From: W. Andy Roche [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 13, 2001 1:40 PM
To: NT 2000 Discussions
Subject: RE: Auto-install software in AD
*sigh* Thanks. I was hoping that there was a way. Dang Microsoft and
their frustrating habit of not thinking things through.
W. Andy Roche
Systems Administrator
NextGen Performance Tuning Team
CSG Systems, Inc.
[EMAIL PROTECTED]
http://www.csgsystems.com
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Ryan Malayter
Sent: Monday, August 13, 2001 1:31 PM
To: NT 2000 Discussions
Subject: RE: Auto-install software in AD
So what? Distribution groups have nothing to do with Group policy or
security - they're for *mail* distribution, via Exchange 2000.
>From the Active Directory Users and Computers help files:
"Distribution groups are not security-enabled. They cannot be listed in
DACLs. Distribution groups can be used only with e-mail applications (such
as Exchange), to send e-mail to collections of users. If you do not need a
group for security purposes, create a distribution group instead of a
security group."
-----Original Message-----
From: W. Andy Roche [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 13, 2001 1:25 PM
To: NT 2000 Discussions
Subject: RE: Auto-install software in AD
Ah, but, there are two types of groups in AD. Security and Distribution.
W. Andy Roche
Systems Administrator
NextGen Performance Tuning Team
CSG Systems, Inc.
[EMAIL PROTECTED]
http://www.csgsystems.com
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Ryan Malayter
Sent: Monday, August 13, 2001 1:04 PM
To: NT 2000 Discussions
Subject: RE: Auto-install software in AD
Nope. Security Groups can only be used to deny access to a Group policies
applied to an OU. You cannot selecively apply a Group Policy to a security
group.
-----Original Message-----
From: W. Andy Roche [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 10, 2001 5:52 PM
To: NT 2000 Discussions
Subject: Auto-install software in AD
I am trying to auto install an app using the Group Policy Interface. I have
created an OU for the app, Created a group policy, and under Computer
Configuration|Software Settings|Software installation created a new
Configuration|package.
The thing is, the only way I can get the software to install is to move the
computer from the computer folder into the OU.
Is there a way to do it using groups so that I don't have to change the OU
for the computer?
W. Andy Roche
Systems Administrator
NextGen Performance Tuning Team
CSG Systems, Inc.
[EMAIL PROTECTED]
http://www.csgsystems.com
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
