GPO

[radiux]

how do I get gpo filtering so one set users get one rule
another get another, and third get a third one? I know how
do it with two but three not sure how to do it. I have a
flat tree I do not want change it. so please help.


thanks

 

[Matjaz Ladava [MVP]]

You control this by allowing only specific group to apply the policy and
then put users to those groups. For example. You have a OU with 500 users
and 3 GPO's. By default Authenticated users have the Read + Apply Policy
right on each policy. If you wand different group of people to get policies,
then you have to create three different security groups, place users into
those groups and change permissions on GPO's by removing authenticated users
group from security and put groups by your choice.

--
Regards

Matjaz Ladava
MVP Windows Server - Directory Services
(e-mail address removed), (e-mail address removed)

 

[Tomasz Onyszko]

how do I get gpo filtering so one set users get one rule
another get another, and third get a third one? I know how
do it with two but three not sure how to do it. I have a
flat tree I do not want change it. so please help.

If You ave flat tree (so i understand that there is no OUs) the only
way to filter the GPO is to place the ACLs on the GPO object to restrict
some users from applying thsi GPO

 

[ptwilliams]

Here's a how-to:
-- http://www.msresource.net/kb/gpoFiltering.html

Don't be afraid to have lots of GPOs linked to the domain and filtered to
only certain users - if it's not applicable it's not applied, and will
therefore not cause performance issues.

--

Paul Williams
_________________________________________
http://www.msresource.net


Join us in our new forums!
http://forums.msresource.net
_________________________________________


how do I get gpo filtering so one set users get one rule
another get another, and third get a third one? I know how
do it with two but three not sure how to do it. I have a
flat tree I do not want change it. so please help.


thanks