Tom's Hardware > Forum > Windows 2000/NT > Windows 2000/NT General Discussion > linking group policy in 2003 server

linking group policy in 2003 server

Forum Windows 2000/NT : Windows 2000/NT General Discussion - linking group policy in 2003 server

Tom's Hardware: Over 1.4 million members in 6 different countries available to answer all your high-tech questions. Sign up now! Its free!
Word :    Username :           
 

Archived from groups: microsoft.public.win2000.group_policy (More info?)

 

Hi all,
I just started using the 2003 gp. My question is:
I have master group policy that affects all users which has a screensaver
enabled.
I created a second group policy for users who I want to disable the
screensaver.
When you are linking policies to a user group which policy is read last and
is it the settings used?
Example of link:
1.master policy with screensaver
2.policy disabling screensaver
should the order of the link be as above and will the group assigned to the
disabled policy override the master policy? (or does enabling override
disabling?)

Sponsored Links
Register or log in to remove.

Archived from groups: microsoft.public.win2000.group_policy (More info?)

 

Group Policies are applied from the bottom up in the list of GPO's in a
container which means the one at the top has highest precedence. What you
need to do however is to put the users in different Organizational Units
with separate GPO's link to them, or at least the users you want to have a
different policy in another OU, or "filter" the GPO so that it will only
apply to the users that you want. You can filter a policy in it's
properties/security and give only the group apply permissions instead of
authenticated users that you want the policy to apply to. The link below may
help. --- Steve

http://support.microsoft.com/defau [...] -us;322176

"Sher" <Sher@discussions.microsoft.com> wrote in message
news:F3E5E6FE-BE2E-4A7B-90B9-E1DDA73483CF@microsoft.com...
> Hi all,
> I just started using the 2003 gp. My question is:
> I have master group policy that affects all users which has a screensaver
> enabled.
> I created a second group policy for users who I want to disable the
> screensaver.
> When you are linking policies to a user group which policy is read last
> and
> is it the settings used?
> Example of link:
> 1.master policy with screensaver
> 2.policy disabling screensaver
> should the order of the link be as above and will the group assigned to
> the
> disabled policy override the master policy? (or does enabling override
> disabling?)
>

Reply to Anonymous

Archived from groups: microsoft.public.win2000.group_policy (More info?)

 

Hi,

> When you are linking policies to a user group which policy is read
> last and is it the settings used?

The GP closest to the user gets read last and is the one that sticks.

Therefore set your enable Screensaver at either the Domain Level or an
OU below it that contains your users. Inside the OU that contains your
users create a second OU for the users who have a disabled
screensaver. Put the Disable Screen Save Group Policy on the child OU.
You Don’t need to block inheritance or anything. As the setting is
the opposite of the one set above then it will be the one that rules.

Eg.

Domain
----My UsersOU (Enable Screensaver GP)
--------My Other UsersOU (Disable Screensaver GP)

I do this all the time and it works great.

Cheers,

Lara

--
Posted using the http://www.WindowsForumz.com/ interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.WindowsForumz.com/Group [...] 46848.html
Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.WindowsForumz.com/eform.php?p=754755

Reply to Anonymous

Archived from groups: microsoft.public.win2000.group_policy (More info?)

 

To clarify some of the other posts, Group Policies do not apply to Groups,
only to user accounts or computer accounts in Organisational Units to which
the GPO is linked to and OUs inside the the one the GPO is linked to (GPO
links are inherited). The only thing you can do with Groups with respect to
Group Policies is to control access to the Group Policy (normal object
security) - you can prevent members of a group from reading or Applying a
Group Policy. So, you can prevent a Group Policy from being applied to
members of a Group, but you can not force a Group Policy to apply to Group
members - only to users or computers in an OU.

There is no way to "link" a Group Policy Object to a Group.

If a GPO is linked to (or inherited by) an OU that does not contain user
accounts or computer accounts, that GPO link will have no affect on
anything.

--
Bruce Sanderson MVP Printing
http://members.shaw.ca/bsanders

It is perfectly useless to know the right answer to the wrong question.



"Sher" <Sher@discussions.microsoft.com> wrote in message
news:F3E5E6FE-BE2E-4A7B-90B9-E1DDA73483CF@microsoft.com...
> Hi all,
> I just started using the 2003 gp. My question is:
> I have master group policy that affects all users which has a screensaver
> enabled.
> I created a second group policy for users who I want to disable the
> screensaver.
> When you are linking policies to a user group which policy is read last
> and
> is it the settings used?
> Example of link:
> 1.master policy with screensaver
> 2.policy disabling screensaver
> should the order of the link be as above and will the group assigned to
> the
> disabled policy override the master policy? (or does enabling override
> disabling?)
>

Reply to Anonymous
Tom's Hardware > Forum > Windows 2000/NT > Windows 2000/NT General Discussion > linking group policy in 2003 server
Go to:

There are 1288 identified and unidentified users. To see the list of identified users, Click here.

Please mind

You are about to answer a thread that has been inactive for more than 6 months.
If you still wish to proceed, please ensure that your posting is original and does not duplicate or overlap any prior responses to this thread.

Add a reply Cancel
Sponsored links
  • Ask the community now
  • Publish
Ad
They won a badge
Join us in greeting them