You are on the right track. Add Loopback Policy Processing to the mix. Personally, I usually separate out computer and user settings, unless there's a compelling reason not to (the settings are closely linked for applicability reasons) or you only have a small number of GPOs
Cheers Ken From: James Rankin [mailto:[email protected]] Sent: Thursday, 28 October 2010 4:10 PM To: NT System Admin Issues Subject: Filtering a GPO by computer I have a logon script GPO for some terminal server users that I want to apply to a specific OU, but not the sub-OUs, and I don't want to use the "Block Inheritance" feature. Can I security filter the GPO by a computer group, or will this stop the GPO from running as it contains some user settings? This is a Windows 2003 domain. TIA, JRR ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
