Howto, Apply user Policy to specific OU only

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

We have the following scenario:

Domain.nl
|
|-OU: Computers
|
|-OU: Laptops
|
|-OU: Accounts
|
Etc..

First: Correct me if i am wrong but iv always been teached that user
settings have to be made on the container where the user accounts are in.
Same for computer settings.

Now, what i have done is create 2 User Policies within the Accounts OU. To
provide the users with user settings.

Policy 1 is to provide settings only when logged on to computers residing in
OU Computers.
Policy 2 obvious is intended only for users who logon to laptops in OU
Laptops.

At the moment when a user is logged on to either a computer or laptop they
get both policies, wich end up in conflicting behaviour. So i would like to
have Policy 1 only to apply when using a computer in OU Computers, and Policy
2 only when logged in to a Laptops in the corresponding OU.

How am i to approach this?

Grx,
Joris
 
Howdy Joris!
First: Correct me if i am wrong but iv always been teached that user
settings have to be made on the container where the user accounts are in.
Same for computer settings.
Click to expand...

That is right - except for one special setting: the Loopback Processing
Mode which...
At the moment when a user is logged on to either a computer or laptop they
get both policies, wich end up in conflicting behaviour. So i would like to
have Policy 1 only to apply when using a computer in OU Computers, and Policy
2 only when logged in to a Laptops in the corresponding OU.
Click to expand...

enables you to go and link user configuration-policies to
computer/machine OUs. With Loopback enabled, the computers will overtake
both the computer configuration settings of the GPs and the user
configuration settings (depending on which mode you selected).

This KB-article is about Loopback Processing:
http://support.microsoft.com/kb/231287/en-us

cheers,

Florian
 
Back
Top