GP Problem

  • Thread starter Thread starter Just Another Admin
  • Start date Start date
J

Just Another Admin

I need help with this my Active Directory tree looks like this

1. AD\<Domain>\Laptops => Which contains the computer names of the laptops
2. AD\<Domain>\Office\Department R&D\users => Which contains the users in
the R&D Department
3. AD\<Domain>\Office\Department R&D\workstation => Which contains the
workstation that belong to that department

Ok this is the problem you see when a user logins to his workstation I have
a GPO which is attached to his username removing access to the C-Drive and
A-Drive but I want this user to have access to his C-Drive and A-Drive only
when he logins with the same username and password on his laptop.

So right now I have 3 different GPO's one linking to each OU.

So I was wondering how could I block the user GPO to be applied on when the
user logins with using his laptop.

Thank you in advance,

G.
 
you need to setup "Loop back processing" on the Laptop OU. This is in
"Computer Config>admin templates>System>Group policy" Set the GP setting to
"Replace" This way when the user logs into the Laptop, the User settings
that are affected by the GPO that is linked to the Laptop OU will affect the
users configuration and not the normally applied user settings that are
linked to the user through its OU GPO settings.

Philip Nunn
 
Back
Top