Same USER, different GPO applied depending on PC

[John Dexter]

I'd like to apply different GPO depending on where does USER login. GPO1
should be applied when he logs in CLIENT (W2KPRO) and GPO2 should be applied
when he logs in SERVER1 (via TS on a W2KSRVR). I've used only "User
Configuration" on both GPOs. Either GPOs shouldn't be applied to ADMIN.
Any suggestions?

 

[Bjoern Wolfgardt]

Hi,

you should take a look at:
http://support.microsoft.com/?kbid=231287
http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:
80/support/kb/articles/q260/3/70.asp&NoWebContent=1
http://www.microsoft.com/windows2000/techinfo/planning/management/groupsteps
..asp
http://www.microsoft.com/windows2000/techinfo/reskit/samplechapters/dsec/dse
c_pol_kcmb.asp

The first link will explain the loopback processing of GPOs. Thats what you
need.

cu
Bjoern Wolfgardt

 

[John Dexter]

Thank you.
As long as I know loopback applies GPO to all users (included ADMIN). I
don't want GPO to be applied to ADMIN. Loopback is not the solution.

 

[Arild Bakken]

In order to exclude admin, just make sure that the user (or group) does not
have "Apply Group Policy" access rights (set through security) on the GPO

Arild

 

[John Dexter]

Thank you,
according to KB231287...

NOTE: You cannot filter the application of user settings by denying or
removing the AGP and Read rights from the computer object specified for the
loopback policy.

Thats why I say loopback does not work in my scenario.
Any suggestions?