Sign in with
Sign up | Sign in
Your question

Group Servers

Tags:
  • Servers
  • Microsoft
  • Active Directory
  • Windows
Last response: in Windows 2000/NT
Share
Anonymous
November 28, 2004 5:20:55 AM

Archived from groups: microsoft.public.win2000.active_directory,microsoft.public.windows.server.active_directory (More info?)

I have one OU for Servers - some of these servers have specific roles - for
example - HR Servers, Accounting Servers etc...

My questions:

I have certain policies I wish to apply based on their roles---example, HR
servers gets its on policies -I can NOT create new OUs based on roles.

Can I create a group and place these servers in there - groups based on
role - for example a group called HR Servers group?

Is the creation of this group the EXACT same way (as far as GUI and buttun
pushing) of creatinf groups for users? But instead of putting users, I
would placed COMPUTER obects in there? So create a Domain Global Security
Group called - HR Servers Group, Accounting Servers Group, etc????


Thanks...hope I made sense - it is just kinda "weird" to create groups same
way but with COMPUTER object- just so used to doing it with users only.

More about : group servers

Anonymous
November 28, 2004 7:37:06 AM

Archived from groups: microsoft.public.win2000.active_directory,microsoft.public.windows.server.active_directory (More info?)

"Rach" <rj@mailstop.com> wrote in message
news:elnrtMS1EHA.2600@TK2MSFTNGP09.phx.gbl...
> I have one OU for Servers - some of these servers have specific roles -
for
> example - HR Servers, Accounting Servers etc...
>
> My questions:
>
> I have certain policies I wish to apply based on their roles---example, HR
> servers gets its on policies -I can NOT create new OUs based on roles.

Ok, but why not?

> Can I create a group and place these servers in there - groups based on
> role - for example a group called HR Servers group?
>
> Is the creation of this group the EXACT same way (as far as GUI and buttun
> pushing) of creatinf groups for users? But instead of putting users, I
> would placed COMPUTER obects in there? So create a Domain Global
Security
> Group called - HR Servers Group, Accounting Servers Group, etc????

Yes, it's the same process.

> Thanks...hope I made sense - it is just kinda "weird" to create groups
same
> way but with COMPUTER object- just so used to doing it with users only.

It changed in Win2000, where computers were made into
first class "objects" -- i.e., they can now be used like any
other security principal, given/denied privileges or placed
into groups for that purpose.


--
Herb Martin
Anonymous
November 28, 2004 3:44:10 PM

Archived from groups: microsoft.public.windows.server.active_directory,microsoft.public.win2000.active_directory (More info?)

"Rach" <rj@mailstop.com> wrote in message news:rj@mailstop.com:
> I have one OU for Servers - some of these servers have specific roles -
> for
> example - HR Servers, Accounting Servers etc...
>
> My questions:
>
> I have certain policies I wish to apply based on their roles---example, HR
> servers gets its on policies -I can NOT create new OUs based on roles.
>
> Can I create a group and place these servers in there - groups based on
> role - for example a group called HR Servers group?
>
> Is the creation of this group the EXACT same way (as far as GUI and buttun
> pushing) of creatinf groups for users? But instead of putting users, I
> would placed COMPUTER obects in there? So create a Domain Global
> Security
> Group called - HR Servers Group, Accounting Servers Group, etc????
>
>
> Thanks...hope I made sense - it is just kinda "weird" to create groups
> same
> way but with COMPUTER object- just so used to doing it with users only.

Hallo Rach,

Yes - you can do this, and only the computer settings of those GPOs
will apply to those servers. However make sure that you include the
group in the security settings of the GPO with read and apply rights,
and remove authenticated users from there.

--
Gruesse - Sincerely,

Ulf B. Simon-Weidner

MVP-Book "Windows XP - Die Expertentipps": http://tinyurl.com/44zcz
Weblog: http://msmvps.org/UlfBSimonWeidner
WebSite: http://www.windowsserverfaq.org
!