Group Servers

[Rach]

I have one OU for Servers - some of these servers have specific roles - for
example - HR Servers, Accounting Servers etc...

My questions:

I have certain policies I wish to apply based on their roles---example, HR
servers gets its on policies -I can NOT create new OUs based on roles.

Can I create a group and place these servers in there - groups based on
role - for example a group called HR Servers group?

Is the creation of this group the EXACT same way (as far as GUI and buttun
pushing) of creatinf groups for users? But instead of putting users, I
would placed COMPUTER obects in there? So create a Domain Global Security
Group called - HR Servers Group, Accounting Servers Group, etc????


Thanks...hope I made sense - it is just kinda "weird" to create groups same
way but with COMPUTER object- just so used to doing it with users only.

 

[Herb Martin]

I have one OU for Servers - some of these servers have specific roles - for
example - HR Servers, Accounting Servers etc...

My questions:

I have certain policies I wish to apply based on their roles---example, HR
servers gets its on policies -I can NOT create new OUs based on roles.

Ok, but why not?

Can I create a group and place these servers in there - groups based on
role - for example a group called HR Servers group?

Is the creation of this group the EXACT same way (as far as GUI and buttun
pushing) of creatinf groups for users? But instead of putting users, I
would placed COMPUTER obects in there? So create a Domain Global Security
Group called - HR Servers Group, Accounting Servers Group, etc????

Yes, it's the same process.

Thanks...hope I made sense - it is just kinda "weird" to create groups same
way but with COMPUTER object- just so used to doing it with users only.

It changed in Win2000, where computers were made into
first class "objects" -- i.e., they can now be used like any
other security principal, given/denied privileges or placed
into groups for that purpose.

 

[Ulf B. Simon-Weidner [MVP]]

I have one OU for Servers - some of these servers have specific roles -
for
example - HR Servers, Accounting Servers etc...

My questions:

I have certain policies I wish to apply based on their roles---example, HR
servers gets its on policies -I can NOT create new OUs based on roles.

Can I create a group and place these servers in there - groups based on
role - for example a group called HR Servers group?

Is the creation of this group the EXACT same way (as far as GUI and buttun
pushing) of creatinf groups for users? But instead of putting users, I
would placed COMPUTER obects in there? So create a Domain Global
Security
Group called - HR Servers Group, Accounting Servers Group, etc????


Thanks...hope I made sense - it is just kinda "weird" to create groups
same
way but with COMPUTER object- just so used to doing it with users only.

Hallo Rach,

Yes - you can do this, and only the computer settings of those GPOs
will apply to those servers. However make sure that you include the
group in the security settings of the GPO with read and apply rights,
and remove authenticated users from there.

--
Gruesse - Sincerely,

Ulf B. Simon-Weidner

MVP-Book "Windows XP - Die Expertentipps": http://tinyurl.com/44zcz
Weblog: http://msmvps.org/UlfBSimonWeidner
WebSite: http://www.windowsserverfaq.org