content ratings

  • Thread starter Thread starter bram
  • Start date Start date
B

bram

Hi,

I am trying to limit the access to www for my users from the GPO.
As I have a couple of GPO, I copied one from the general one, name it
as "no-www" and modify it so it disable access to not allowed www
site.

it works, but the problem.. all the other GPO also disable the access
to www.
so it's like using the same policy at the end.

I have tried to get a way around it.. but no luck.
whatever I applied to my new GPO in the content rating issue it always
apply to the other GPO.

I defenitely making mistake somewhere.

has anyone got any idea about this ?

Cheers,
al
 
In
bram said:
Hi,

I am trying to limit the access to www for my users from the GPO.
As I have a couple of GPO, I copied one from the general one, name it
as "no-www" and modify it so it disable access to not allowed www
site.

it works, but the problem.. all the other GPO also disable the access
to www.
so it's like using the same policy at the end.

I have tried to get a way around it.. but no luck.
whatever I applied to my new GPO in the content rating issue it always
apply to the other GPO.

I defenitely making mistake somewhere.

has anyone got any idea about this ?

Cheers,
al
Click to expand...

At what level are you applying the GPO at? If at a parent level, such as the
Domain, that will inherit downhill to all OUs and will apply unless you
block inheritance at a specific OU that you don't want to apply or there;s
another GPO that has the setting disabled, which will override the parent.

If this is the case, it may be better to just link that GPO to the OU that
you want those specific users affected by this GPO.

Hope that makes sense and helps out.

--
Regards,
Ace

Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services

Security Is Like An Onion, It Has Layers
HAM AND EGGS: A day's work for a chicken;
A lifetime commitment for a pig.
 
Hi Ace,

Thanks for your mail.
I have linked the GPO to the OU that I want, but for some reason
everytime I make changes to that specific OU ( in content ratings) it
would also apply to the other OU linked using their own GPO.

does it make sense to you ?
btw, i have blocked the inheriance as well, and i dont think that is
the case, cos only 1 GPO per OU and each OU have their own GPO.

Thanks
 
In
bram said:
Hi Ace,

Thanks for your mail.
Click to expand...

You are welcome!
I have linked the GPO to the OU that I want, but for some reason
everytime I make changes to that specific OU ( in content ratings) it
would also apply to the other OU linked using their own GPO.
Click to expand...

If they are using the same exact GPO that you made a change to, then it will
apply to everywhere it's linked to.
does it make sense to you ?
Click to expand...

Yes, if it is the same exact GPO.
btw, i have blocked the inheriance as well, and i dont think that is
the case, cos only 1 GPO per OU and each OU have their own GPO.

Thanks
Click to expand...

So you are saying that each has an individual GPO or they are linking this
one to the other OUs? If the same one is linked elsewhere, the settings will
be the same.



--
Regards,
Ace

Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services

Security Is Like An Onion, It Has Layers
HAM AND EGGS: A day's work for a chicken;
A lifetime commitment for a pig.
 
Ace Fekay said:
In

You are welcome!


If they are using the same exact GPO that you made a change to, then it will
apply to everywhere it's linked to.


Yes, if it is the same exact GPO.


So you are saying that each has an individual GPO or they are linking this
one to the other OUs? If the same one is linked elsewhere, the settings will
be the same.
Click to expand...

no, each GPO only link to 1 OU.
so 1 to 1.
but if 1 make changes to 1 GPO, the changes also apply to the
different OU which not linked.
make sense ?
 
In
bram said:
no, each GPO only link to 1 OU.
so 1 to 1.
but if 1 make changes to 1 GPO, the changes also apply to the
different OU which not linked.
make sense ?
Click to expand...

I see and understand what you are saying, but no, it doesn't really make
sense on why this is happening to you.

So you are saying that making a change to one GPO, say the SalesGPO that was
created and linked to the Sales OU, is also affecting the AccountantsGPO
that was created and linked to the Accountant OU?

Do you see what I mean? That should not be happening at all, unless they are
crossed link elsewhere.

Unless of course the Content rating is a domain wide setting....

Is this WIndows 2000 or 2003? If 2003, use the GPMC tool's Modeling Wizard
to test this and use the RSOP wizard to find out what and where the settings
are coming from. If Windows 2000, use gpresults or the 3rd party FAZAM 2000
tool (www.fullarmor.com). At this point, that maybe the better bet to hunt
this down.



--
Regards,
Ace

Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services

Security Is Like An Onion, It Has Layers
HAM AND EGGS: A day's work for a chicken;
A lifetime commitment for a pig.
 
Back
Top