gpo applied to a group

[Ilann]

can we apply a gpo to a security group?


--Ilann

 

[Norbert Fehlauer [MVP]]

Ilann wrote:
Hi,

can we apply a gpo to a security group?

No, though you can apply securtity filter through security groups.
http://support.microsoft.com/kb/220822/en-us

Bye
Norbert

 

[Ilann]

if I link the gpo to the domain directly can I filter through security
groups?

--Ilann

 

[Norbert Fehlauer [MVP]]

if I link the gpo to the domain directly can I filter through security
groups?

Yes you can, but I wouldn't suggest linking to domainlevel.

Bye
Norbert

 

[Ilann]

when I create a security group and I put a username in the group, then I run
whoami from the client machine, and the group doesn't show up in the list of
the groups,

I used whoami /groups /all

I created a gpo that just disables the screen saver for the user.That's the
only setting.
I created a group I want to apply the gpo to. I put one user in that group
The gpo is linked to domain level

when I run rsop on the client computer, I get a message saying that the gpo
has been denied for security filtering, I checked the read, apply group
policy checkboxes for the security group,

any idea?

--Ilann

 

[Norbert Fehlauer [MVP]]

when I create a security group and I put a username in the group,
then I run whoami from the client machine, and the group doesn't show
up in the list of the groups,

Did you re-login after you applied the groupmembership to the user?

I created a gpo that just disables the screen saver for the
user.That's the only setting.

Than why would you put this gpo at domain level?

I created a group I want to apply the gpo to. I put one user in that
group The gpo is linked to domain level

Did you check "apply gpo" to that group?


Bye
Norbert

 

[Ilann]

rebooting the client solved everything,

isn't there any command line for a client to get active directory updates?

Thanks for your help

--Ilann

 

[Norbert Fehlauer [MVP]]

Ilann wrote:
Hi,

isn't there any command line for a client to get active directory
updates?

Sure.
XP:gpupdate /force
W2k: secedit /refreshpolicy machine_policy /enforce & secedit /refreshpolicy
user_policy /enforce

There are some settings that get only applied on reboot.

Bye
Norbert

 

[eric hela]

at command prompt type: gpupdate /?

rgds
Eric Hela

rebooting the client solved everything,

isn't there any command line for a client to get active directory updates?

Thanks for your help

--Ilann