>-----Original Message-----
>I don't think you can. Group will have its SID and user
>will have his SID. I think group policy will work for
>computer and users....not for group..
>thanks,
>
>>-----Original Message-----
>>I created a Group Policy for an Organization Unit. If I
>move a user to
>>that Organization Unit, he gets the Group Policy
>settings. If I create a
>>"Security Group - Domain Local" in that Organization
Unit
>and add a user
>>as a member of that group, he does not get the Group
>Policy settings.
>>
>>Is there anyway to have a group get Group Policy
settings
>or must the
>>actual user to placed in the Organization Unit that has
>the Group
>>Policy?
>>
>>Thanks to anyone who can help me out.
>>.
>>
>.
While you cannot directly apply a GPO to a Security Group
( remember the pecking order: Local, Site, Domain, OU,
sub-OU ) you very much can use a Security Group to filter
the GPO. Normally, the group 'Authenticated Users' has
the 'Read' and 'Apply Group Policy' rights to the GPO.
Simply delete that entry and replace it with the Security
Group of your choice. Just remember to give 'the
Security Group of your choice' those two rights!
HTH,
Cary Shultz
Windows Server - Active Directory MVP
|
Similar Threads
