GP Problem

[Just Another Admin]

I need help with this my Active Directory tree looks like this

1. AD\<Domain>\Laptops => Which contains the computer names of the laptops
2. AD\<Domain>\Office\Department R&D\users => Which contains the users in
the R&D Department
3. AD\<Domain>\Office\Department R&D\workstation => Which contains the
workstation that belong to that department

Ok this is the problem you see when a user logins to his workstation I have
a GPO which is attached to his username removing access to the C-Drive and
A-Drive but I want this user to have access to his C-Drive and A-Drive only
when he logins with the same username and password on his laptop.

So right now I have 3 different GPO's one linking to each OU.

So I was wondering how could I block the user GPO to be applied on when the
user logins with using his laptop.

Thanks in advance,

G.

 

[Brian Desmond [MVP]]

Hi,

Go into the machine level GPO for the laptops, and browse to Computer
Config/ADmin Templates/System/Group Policy. Turn loopback processing on.

Next, go into the user settings of the GPO (the one we're working on right
now), and reenable access to A, C, and any other settings you want to apply.

Enabling loopback processing will instruct the machine to apply the user
config settings to any user who logs onto the laptop (or whatever machine is
affected by the change to Loopback settings).

--
--
Brian Desmond
Windows Server MVP
(e-mail address removed)12.il.us

Http://www.briandesmond.com