How to apply Computer Config to specific users?

  • Thread starter Thread starter Brian Nielsen
  • Start date Start date
B

Brian Nielsen

Hi,

I am interested in applying computer GPOs to specific users. I don't know
which computers the users are connecting with - I only know which users. I
have tried creating a GPO but it does not seem to apply. I have read about
the Loopback Policy Processing, but it seems you could only use this when
you wan't a user policy to apply to a computer and not the opposite:

I hope someone can help me out.

Best Regards

Brian
 
Brian Nielsen said:
Hi,

I am interested in applying computer GPOs to specific users. I
don't know
which computers the users are connecting with - I only know
which users. I
have tried creating a GPO but it does not seem to apply. I
have read about
the Loopback Policy Processing, but it seems you could only
use this when
you wan't a user policy to apply to a computer and not the
opposite:

I hope someone can help me out.

Best Regards

Brian
Click to expand...

Hi,

You cannot apply Computer GPO’s to specific users. You can apply the
"User-Config" of a Computer GPO’s to ALL users who login to that
specific computer using the Loopback Policy Processing.

What is it you are trying to do? What settings do you need to apply
to specific users? Why not use just a Users GPO?

Cheers,

Lara
 
Hi,

I want to configure WUS (Windows Update Services) to push out updates to
specific departments. But I don't know which computers are in which
departments because they are renewed pretty often. But I know which users
who works in which departments. Therefore I want to push out the WUS
policy - which is a computer policy - to these users.

I have tried to apply the policy to the OU in which all my workstations
resides. I have then defined the security to a specific usergroup. I think
this should work but it does not seem to work

Hope this helps.

Best Regards

Brian
 
Computer Configuration settings are completely independent of Users. The
settings are applied to the computer. What user actually logs on at the
computer makes no difference whatsoever.

There is no fixed relationship between users and computers - a user is
associated with a particular computer only while they are actually logged
on.

You will have to know which computers you want the WUS settings applied to
and put them in an OU to which you link the corresponding GPO. Managing the
inventory (which computers are in which department and thus which OU) is
essential to managing computers via GPO.

--
Bruce Sanderson MVP Printing
http://members.shaw.ca/bsanders

It is perfectly useless to know the right answer to the wrong question.
 
Okay - thank you.

Then I have to make an inventory of all my computers and where the resides.

-Brian
 
I have a similar situation. What I do is put those computers and users in a
seperate OU and configure the policy in that OU. Not perfect but close
enough for my situation since the users and computers in question are all at
a remote site.

Mike Ober.
 
Hi,
I want to configure WUS (Windows Update Services) to push out updates
to specific departments. But I don’t know which computers are in
which departments because they are renewed pretty often.
Click to expand...

Why do you need to do it via department? Why not just let WUS update
everything. Also WUS has a built in "group" section where you can
group computers via OS etc. It is very smart in that it keeps track of
every machine that contacts it and when and whether their updates were
applied.

It sounds very complicated if you don’t know what computers are in
what departments? Anyway, the answer is you cannot do WUS via User.
It is done via computer as the computer contacts the WUS server using
the Network Service account completely independently of a user.

Another thing you could do is introduce some sort of required naming
structure where you have the Department name all their computers
starting with a certain code. This is how I sort my 1200 stations via
department.

Cheers,

Lara
 
Back
Top