Howto, Apply user Policy to specific OU only

[Guest]

We have the following scenario:

Domain.nl
|
|-OU: Computers
|
|-OU: Laptops
|
|-OU: Accounts
|
Etc..

First: Correct me if i am wrong but iv always been teached that user
settings have to be made on the container where the user accounts are in.
Same for computer settings.

Now, what i have done is create 2 User Policies within the Accounts OU. To
provide the users with user settings.

Policy 1 is to provide settings only when logged on to computers residing in
OU Computers.
Policy 2 obvious is intended only for users who logon to laptops in OU
Laptops.

At the moment when a user is logged on to either a computer or laptop they
get both policies, wich end up in conflicting behaviour. So i would like to
have Policy 1 only to apply when using a computer in OU Computers, and Policy
2 only when logged in to a Laptops in the corresponding OU.

How am i to approach this?

Grx,
Joris

 

[Florian Frommherz]

Howdy Joris!

First: Correct me if i am wrong but iv always been teached that user
settings have to be made on the container where the user accounts are in.
Same for computer settings.

That is right - except for one special setting: the Loopback Processing
Mode which...

At the moment when a user is logged on to either a computer or laptop they
get both policies, wich end up in conflicting behaviour. So i would like to
have Policy 1 only to apply when using a computer in OU Computers, and Policy
2 only when logged in to a Laptops in the corresponding OU.

enables you to go and link user configuration-policies to
computer/machine OUs. With Loopback enabled, the computers will overtake
both the computer configuration settings of the GPs and the user
configuration settings (depending on which mode you selected).

This KB-article is about Loopback Processing:
http://support.microsoft.com/kb/231287/en-us

cheers,

Florian