Yes, but what I didn't know was, let's say you have:
OU1 Users OU2 Computers You apply the OU against OU2 which has the computer in it, but you also need to give the users permissions for the GPO to apply to them. I think that's the bit I'd missed somehow. From: Brian Desmond [mailto:[email protected]] Sent: 24 November 2010 19:14 To: NT System Admin Issues Subject: RE: GPO Loopback Processing - What am I missing? I'm confused by this thread ... The whole point of loopback processing is that you apply the user settings to the computer's OU. Now an anecdote - that loopback settings item in the policy applies to the ENTIRE session - not just that GPO. What that means is it will apply every single policy on that computer in loopback mode come user logon time. This also means you don't need X dozen GPOs with the same loopback flag set in it. Thanks, Brian Desmond [email protected] c - 312.731.3132 From: Paul Hutchings [mailto:[email protected]] Sent: Wednesday, November 24, 2010 5:45 AM To: NT System Admin Issues Subject: RE: GPO Loopback Processing - What am I missing? Ah thank you, it's working now. I could have sworn I tried this yesterday but clearly not. Perfect! From: James Rankin [mailto:[email protected]] Sent: 24 November 2010 11:23 To: NT System Admin Issues Subject: Re: GPO Loopback Processing - What am I missing? Not unless Joe Bloggs is in the OU with the computer he won't. Are your users and computers in the same OUs? I try to keep them separate wherever possible. However you should be able to filter by computer in the GPO with loopback policy processing enabled, as I remember. On 24 November 2010 11:20, Paul Hutchings <[email protected]> wrote: Maybe.. I don't know! If I apply the GPO to Joe Bloggs though, Joe will get those settings on any PC, when the whole point I only want him to get those user settings, when logging on to PC XYZ. From: James Rankin [mailto:[email protected]] Sent: 24 November 2010 11:16 To: NT System Admin Issues Subject: Re: GPO Loopback Processing - What am I missing? Shouldn't you apply it to the users you want to receive it, as it is a user setting you are deploying (albeit with loopback)? On 24 November 2010 11:12, Paul Hutchings <[email protected]> wrote: I have a group of PC's that I want to have certain user settings, regardless of who is logged on. So, I setup a GPO with the following settings: Computer Configuration/Administrative Templates/System/Group Policy - Merge User Configuration/Administrative Templates/Control Panel/Personalization - Where I've set various options to mandate a screen saver. I then applied the GPO to an OU where my sample PC is, and set the policy to only apply to that computers account. It doesn't seem to be working in that "gpresult /r" shows the policy as being enforced in the computer settings, but the screensaver options are totally untouched. I think I've missed something totally obvious, and I'm ashamed to say I can't see for the life of me what that may be. Thanks, Paul ________________________________ MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered in England and Wales No. 402570 VAT Registration GB 114 5409 96 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin -- "On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question." ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin -- "On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question." ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
