Re: Set GPO for specific user group by Costas
Costas
Thu May 15 09:35:07 PDT 2008
Click on the domain name (domain.local) in Group Policy Management, select
the GPO and then click the arrow to the left to move it to the top of the
list
--
Costas
"SusanV" <s@s.com> wrote in message
news:upYR0SqtIHA.3804@TK2MSFTNGP02.phx.gbl...
> OK, now the new GPO (MCA_RWW) is listed, but the ie homepage is still set
> to companyweb, rather than companyweb/mca:
>
>
> Microsoft Windows XP [Version 5.1.2600]
> (C) Copyright 1985-2001 Microsoft Corp.
>
> C:\Documents and Settings\billw>gpresult
>
> Microsoft (R) Windows (R) XP Operating System Group Policy Result too
> Copyright (C) Microsoft Corp. 1981-2001
>
> Created On 5/15/2008 at 11:57:12 AM
>
>
> RSOP results for LIGHTSHIPGROUP\billw on MCAPC01 : Logging Mode
> ----------------------------------------------------------------
>
> OS Type: Microsoft Windows XP Professional
> OS Configuration: Member Workstation
> OS Version: 5.1.2600
> Domain Name: LIGHTSHIPGROUP
> Domain Type: Windows 2000
> Site Name: MainOffice
> Roaming Profile:
> Local Profile: C:\Documents and Settings\billw
> Connected over a slow link?: No
>
>
> COMPUTER SETTINGS
> ------------------
> CN=MCAPC01,OU=SBSComputers,OU=Computers,OU=MyBusiness,DC=lightshi
> ocal
> Last time Group Policy was applied: 5/15/2008 at 11:55:23 AM
> Group Policy was applied from: LSGSBS.lightshipgroup.local
> Group Policy slow link threshold: 500 kbps
>
> Applied Group Policy Objects
> -----------------------------
> Small Business Server Domain Password Policy
> Small Business Server Windows Firewall
> Small Business Server Client Computer
> Small Business Server Remote Assistance Policy
> Small Business Server Lockout Policy
> Default Domain Policy
> Small Business Server Update Services Client Computers Policy
> Small Business Server Update Services Common Settings Policy
>
> The following GPOs were not applied because they were filtered ou
> -----------------------------------------------------------------
> Small Business Server Internet Connection Firewall
> Filtering: Denied (WMI Filter)
> WMI Filter: PreSP2
>
> Small Business Server Folder Redirection
> Filtering: Not Applied (Empty)
>
> Local Group Policy
> Filtering: Not Applied (Empty)
>
> The computer is a part of the following security groups:
> --------------------------------------------------------
> BUILTIN\Administrators
> Everyone
> MCAPC01 Admins
> BUILTIN\Users
> NT AUTHORITY\NETWORK
> NT AUTHORITY\Authenticated Users
> MCAPC01$
> Domain Computers
>
>
> USER SETTINGS
> --------------
> CN=Bill Watts,OU=SBSUsers,OU=Users,OU=MyBusiness,DC=lightshipgrou
> Last time Group Policy was applied: 5/15/2008 at 11:56:43 AM
> Group Policy was applied from: LSGSBS.lightshipgroup.local
> Group Policy slow link threshold: 500 kbps
>
> Applied Group Policy Objects
> -----------------------------
> Show Desktop Icons
> Small Business Server Folder Redirection
> Small Business Server Domain Password Policy
> Default Domain Policy
> MCA_RWW
>
> The following GPOs were not applied because they were filtered ou
> -----------------------------------------------------------------
> Small Business Server Client Computer
> Filtering: Not Applied (Empty)
>
> Small Business Server Update Services Common Settings Policy
> Filtering: Not Applied (Empty)
>
> Local Group Policy
> Filtering: Not Applied (Empty)
>
> Small Business Server Lockout Policy
> Filtering: Disabled (GPO)
>
> Small Business Server Internet Connection Firewall
> Filtering: Denied (WMI Filter)
> WMI Filter: PreSP2
>
> Small Business Server Remote Assistance Policy
> Filtering: Disabled (GPO)
>
> Small Business Server Windows Firewall
> Filtering: Not Applied (Empty)
>
> The user is a part of the following security groups:
> ----------------------------------------------------
> Domain Users
> Everyone
> BUILTIN\Users
> Remote Desktop Users
> BUILTIN\Administrators
> REMOTE INTERACTIVE LOGON
> NT AUTHORITY\INTERACTIVE
> NT AUTHORITY\Authenticated Users
> LOCAL
> SBS Internet Users
> Web Workplace Users
> Limited Users Group
>
> C:\Documents and Settings\billw>
>
> "Costas" <cpstechgroup@gmail.com> wrote in message
> news:%23Y5J9GqtIHA.4912@TK2MSFTNGP03.phx.gbl...
>> Susan,
>>
>> Do this. Create the GPO by clicking on the domain name (domain.local)
>> and selecting 'create and link a gpo here'. Then go to MyBusiness OU,
>> and under 'Users' create a new OU. Right click on the new OU and select
>> link an existing GPO. Link the GPO you created here.
>>
>> Click on the GPO and add the security group you want the GPO to apply to.
>> Remove the 'Authenticated Users' group. From the workstation run
>> gpupdate at the command prompt.
>>
>> See if that helps. If not, run gpresults again and see if the OU is
>> listed and whether is applied or not
>>
>> --
>> Costas
>>
>>
>> "SusanV" <s@s.com> wrote in message
>> news:OVdlF1ptIHA.4260@TK2MSFTNGP05.phx.gbl...
>>> Thanks for your help - I know I'm doing somethign incredibly stupid!
>>> Hmmm, nope not listed - the new OU is MCA and the new GPO is called MCA
>>> Limited Users, with Security Filtering set to only the Limimted Users
>>> Group (which BillW is a member of) :
>>>
>>> USER SETTINGS
>>> --------------
>>> CN=Bill
>>> Watts,OU=SBSUsers,OU=Users,OU=MyBusiness,DC=lightshipgroup,DC=local
>>> Last time Group Policy was applied: 5/15/2008 at 11:00:47 AM
>>> Group Policy was applied from: LSGSBS.lightshipgroup.local
>>> Group Policy slow link threshold: 500 kbps
>>>
>>> Applied Group Policy Objects
>>> -----------------------------
>>> Show Desktop Icons
>>> Small Business Server Folder Redirection
>>> Small Business Server Domain Password Policy
>>> Default Domain Policy
>>>
>>> The following GPOs were not applied because they were filtered out
>>> -------------------------------------------------------------------
>>> Small Business Server Windows Firewall
>>> Filtering: Not Applied (Empty)
>>>
>>> Small Business Server Internet Connection Firewall
>>> Filtering: Denied (WMI Filter)
>>> WMI Filter: PreSP2
>>>
>>> Small Business Server Update Services Common Settings Policy
>>> Filtering: Not Applied (Empty)
>>>
>>> Small Business Server Lockout Policy
>>> Filtering: Disabled (GPO)
>>>
>>> Local Group Policy
>>> Filtering: Not Applied (Empty)
>>>
>>> Small Business Server Client Computer
>>> Filtering: Not Applied (Empty)
>>>
>>> Small Business Server Remote Assistance Policy
>>> Filtering: Disabled (GPO)
>>>
>>> The user is a part of the following security groups:
>>> ----------------------------------------------------
>>> Domain Users
>>> Everyone
>>> BUILTIN\Users
>>> Remote Desktop Users
>>> BUILTIN\Administrators
>>> REMOTE INTERACTIVE LOGON
>>> NT AUTHORITY\INTERACTIVE
>>> NT AUTHORITY\Authenticated Users
>>> LOCAL
>>> SBS Internet Users
>>> Web Workplace Users
>>> Limited Users Group
>>>
>>> "Costas" <cpstechgroup@gmail.com> wrote in message
>>> news:eXZUCRptIHA.1236@TK2MSFTNGP02.phx.gbl...
>>>> Go to the command prompt of a workstation logged in as a user of the
>>>> new group, and run: gpresult /r
>>>>
>>>> Is the new GPO applied to the user? If not, try running: gpupdate
>>>> /force and check again to see if the GPO is applied
>>>>
>>>> --
>>>> Costas
>>>>
>>>>
>>>> "SusanV" <s@s.com> wrote in message
>>>> news:uaU8w3otIHA.2068@TK2MSFTNGP05.phx.gbl...
>>>>> hi all,
>>>>>
>>>>> We have a user group defined for certain folks who connect via RWW
>>>>> only, who need certain policies applied:
>>>>> 1. Force logoff after idle
>>>>> 2. Change IE homepage from company web
>>>>> 3. Specific file/folder auditing
>>>>>
>>>>> I created a new OU and GPO (setting just the IE homepage for now),
>>>>> linked the GPO to the OU, set teh OU to the group, verified the new
>>>>> GPO is the first item in the OU Precedence list. The IE homepage is
>>>>> still set to companyweb for the users in the group (applied via
>>>>> Default Domain Policy).
>>>>>
>>>>> Then I set the OU to Block Inheritance, but still no joy.
>>>>>
>>>>> What am I missing or doing wrong? Searching the web I see lots of
>>>>> references to setting a no Override, but cannot find this option?
>>>>>
>>>>> TIA,
>>>>> SusanV
>>>>>
>>>>>
>>>>>
>>>>
>>>
>>>
>>
>
>