Change a specific user

  • Thread starter Thread starter David Richardson
  • Start date Start date
D

David Richardson

Hey,

Sorry a big newbie here :(

I have a domain that uses GP's at present set by OU, however I have one user in an OU that requires the availability of the C drive, this is the only difference between him and everyone else.

Can I simply add a new blank GP on his OU specific only to him and change this one setting? or do I have to copy the OU GP again making it specific to him and then change the one setting?

Sorry if this has been asked before but having done various searches I can't seem to locate an answer, some close but nothing exact :( Thanks for nay help offered.
 
If you nest the new OU inside the existing OU that has the GPO applied, you
can create and link a new GPO to the nested OU that only has the setting you
want to override.

E.g.
AllUsersOU - full GPO applied here
\
- SpecialUserOU - partial GPO with new setting applied here will
override same setting in full GPO

Another possible way is to adjust the security settings on the GPO so that
"Apply Group Policy" is set to "Deny" for that user (or, if you prefer, to a
Group); this will mean that none of the User Configuration settings in that
particular GPO will be applied to that particular user.

In the Group Policy Management Console:
1. select the GPO you don't want to apply to a particular user in the left
pane
2. in the right pane, select the Delegation tab
3. click the Advanced button
4. click Add, then key the username (or group name); click OK
5. make sure that the name you just added is selected in the "Group or user
names:" list, then click on the check box under "Deny" beside "Apply Group
Policy"
6. click OK

See http://support.microsoft.com/default.aspx?scid=kb;en-us;273857
and http://support.microsoft.com/default.aspx?scid=kb;en-us;816100
- use the steps in this one if you are not using the Group Policy
Management Console
 
Fantastic, many thanks Bruce :)

Later days - Dave

nntp://news.plus.net/microsoft.public.win2000.group_policy/<[email protected]>

If you nest the new OU inside the existing OU that has the GPO applied, you
can create and link a new GPO to the nested OU that only has the setting you
want to override.

E.g.
AllUsersOU - full GPO applied here
\
- SpecialUserOU - partial GPO with new setting applied here will
override same setting in full GPO

Another possible way is to adjust the security settings on the GPO so that
"Apply Group Policy" is set to "Deny" for that user (or, if you prefer, to a
Group); this will mean that none of the User Configuration settings in that
particular GPO will be applied to that particular user.

In the Group Policy Management Console:
1. select the GPO you don't want to apply to a particular user in the left
pane
2. in the right pane, select the Delegation tab
3. click the Advanced button
4. click Add, then key the username (or group name); click OK
5. make sure that the name you just added is selected in the "Group or user
names:" list, then click on the check box under "Deny" beside "Apply Group
Policy"
6. click OK

See http://support.microsoft.com/default.aspx?scid=kb;en-us;273857
and http://support.microsoft.com/default.aspx?scid=kb;en-us;816100
- use the steps in this one if you are not using the Group Policy
Management Console
 
Back
Top