How to apply Computer Config to specific users?

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi,

I am interested in applying computer GPOs to specific users. I don't know
which computers the users are connecting with - I only know which users. I
have tried creating a GPO but it does not seem to apply. I have read about
the Loopback Policy Processing, but it seems you could only use this when
you wan't a user policy to apply to a computer and not the opposite:

I hope someone can help me out.

Best Regards

Brian

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

"Brian Nielsen" wrote:
> Hi,
>
> I am interested in applying computer GPOs to specific users. I
> don't know
> which computers the users are connecting with - I only know
> which users. I
> have tried creating a GPO but it does not seem to apply. I
> have read about
> the Loopback Policy Processing, but it seems you could only
> use this when
> you wan't a user policy to apply to a computer and not the
> opposite:
>
> I hope someone can help me out.
>
> Best Regards
>
> Brian

Hi,

You cannot apply Computer GPO’s to specific users. You can apply the
"User-Config" of a Computer GPO’s to ALL users who login to that
specific computer using the Loopback Policy Processing.

What is it you are trying to do? What settings do you need to apply
to specific users? Why not use just a Users GPO?

Cheers,

Lara

--
Posted using the http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.windowsforumz.com/Group-Policy-apply-Computer-Config-specific-users-ftopict374769.html
Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=1218026

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi,

I want to configure WUS (Windows Update Services) to push out updates to
specific departments. But I don't know which computers are in which
departments because they are renewed pretty often. But I know which users
who works in which departments. Therefore I want to push out the WUS
policy - which is a computer policy - to these users.

I have tried to apply the policy to the OU in which all my workstations
resides. I have then defined the security to a specific usergroup. I think
this should work but it does not seem to work

Hope this helps.

Best Regards

Brian

"lforbes" <UseLinkToEmail@WindowsForumz.com> skrev i en meddelelse
news:3_1218026_f751c9924321c0e585ec311b06020e8d@windowsforumz.com...
> "Brian Nielsen" wrote:
> > Hi,
> >
> > I am interested in applying computer GPOs to specific users. I
> > don't know
> > which computers the users are connecting with - I only know
> > which users. I
> > have tried creating a GPO but it does not seem to apply. I
> > have read about
> > the Loopback Policy Processing, but it seems you could only
> > use this when
> > you wan't a user policy to apply to a computer and not the
> > opposite:
> >
> > I hope someone can help me out.
> >
> > Best Regards
> >
> > Brian
>
> Hi,
>
> You cannot apply Computer GPO's to specific users. You can apply the
> "User-Config" of a Computer GPO's to ALL users who login to that
> specific computer using the Loopback Policy Processing.
>
> What is it you are trying to do? What settings do you need to apply
> to specific users? Why not use just a Users GPO?
>
> Cheers,
>
> Lara
>
> --
> Posted using the http://www.windowsforumz.com interface, at author's
> request
> Articles individually checked for conformance to usenet standards
> Topic URL:
> http://www.windowsforumz.com/Group-Policy-apply-Computer-Config-specific-users-ftopict374769.html
> Visit Topic URL to contact author (reg. req'd). Report abuse:
> http://www.windowsforumz.com/eform.php?p=1218026

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Computer Configuration settings are completely independent of Users. The
settings are applied to the computer. What user actually logs on at the
computer makes no difference whatsoever.

There is no fixed relationship between users and computers - a user is
associated with a particular computer only while they are actually logged
on.

You will have to know which computers you want the WUS settings applied to
and put them in an OU to which you link the corresponding GPO. Managing the
inventory (which computers are in which department and thus which OU) is
essential to managing computers via GPO.

--
Bruce Sanderson MVP Printing
http://members.shaw.ca/bsanders

It is perfectly useless to know the right answer to the wrong question.



"Brian Nielsen" <brian.heilmann@sletmig_wuerth.dk> wrote in message
news:OPwjNNRXFHA.160@TK2MSFTNGP15.phx.gbl...
> Hi,
>
> I want to configure WUS (Windows Update Services) to push out updates to
> specific departments. But I don't know which computers are in which
> departments because they are renewed pretty often. But I know which users
> who works in which departments. Therefore I want to push out the WUS
> policy - which is a computer policy - to these users.
>
> I have tried to apply the policy to the OU in which all my workstations
> resides. I have then defined the security to a specific usergroup. I think
> this should work but it does not seem to work
>
> Hope this helps.
>
> Best Regards
>
> Brian
>
> "lforbes" <UseLinkToEmail@WindowsForumz.com> skrev i en meddelelse
> news:3_1218026_f751c9924321c0e585ec311b06020e8d@windowsforumz.com...
>> "Brian Nielsen" wrote:
>> > Hi,
>> >
>> > I am interested in applying computer GPOs to specific users. I
>> > don't know
>> > which computers the users are connecting with - I only know
>> > which users. I
>> > have tried creating a GPO but it does not seem to apply. I
>> > have read about
>> > the Loopback Policy Processing, but it seems you could only
>> > use this when
>> > you wan't a user policy to apply to a computer and not the
>> > opposite:
>> >
>> > I hope someone can help me out.
>> >
>> > Best Regards
>> >
>> > Brian
>>
>> Hi,
>>
>> You cannot apply Computer GPO's to specific users. You can apply the
>> "User-Config" of a Computer GPO's to ALL users who login to that
>> specific computer using the Loopback Policy Processing.
>>
>> What is it you are trying to do? What settings do you need to apply
>> to specific users? Why not use just a Users GPO?
>>
>> Cheers,
>>
>> Lara
>>
>> --
>> Posted using the http://www.windowsforumz.com interface, at author's
>> request
>> Articles individually checked for conformance to usenet standards
>> Topic URL:
>> http://www.windowsforumz.com/Group-Policy-apply-Computer-Config-specific-users-ftopict374769.html
>> Visit Topic URL to contact author (reg. req'd). Report abuse:
>> http://www.windowsforumz.com/eform.php?p=1218026
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

I have a similar situation. What I do is put those computers and users in a
seperate OU and configure the policy in that OU. Not perfect but close
enough for my situation since the users and computers in question are all at
a remote site.

Mike Ober.

"Bruce Sanderson" <bsanders@junk.junk> wrote in message
news:O%23EONOXXFHA.3760@TK2MSFTNGP15.phx.gbl...
> Computer Configuration settings are completely independent of Users. The
> settings are applied to the computer. What user actually logs on at the
> computer makes no difference whatsoever.
>
> There is no fixed relationship between users and computers - a user is
> associated with a particular computer only while they are actually logged
> on.
>
> You will have to know which computers you want the WUS settings applied to
> and put them in an OU to which you link the corresponding GPO. Managing
the
> inventory (which computers are in which department and thus which OU) is
> essential to managing computers via GPO.
>
> --
> Bruce Sanderson MVP Printing
> http://members.shaw.ca/bsanders
>
> It is perfectly useless to know the right answer to the wrong question.
>
>
>
> "Brian Nielsen" <brian.heilmann@sletmig_wuerth.dk> wrote in message
> news:OPwjNNRXFHA.160@TK2MSFTNGP15.phx.gbl...
> > Hi,
> >
> > I want to configure WUS (Windows Update Services) to push out updates to
> > specific departments. But I don't know which computers are in which
> > departments because they are renewed pretty often. But I know which
users
> > who works in which departments. Therefore I want to push out the WUS
> > policy - which is a computer policy - to these users.
> >
> > I have tried to apply the policy to the OU in which all my workstations
> > resides. I have then defined the security to a specific usergroup. I
think
> > this should work but it does not seem to work
> >
> > Hope this helps.
> >
> > Best Regards
> >
> > Brian
> >
> > "lforbes" <UseLinkToEmail@WindowsForumz.com> skrev i en meddelelse
> > news:3_1218026_f751c9924321c0e585ec311b06020e8d@windowsforumz.com...
> >> "Brian Nielsen" wrote:
> >> > Hi,
> >> >
> >> > I am interested in applying computer GPOs to specific users. I
> >> > don't know
> >> > which computers the users are connecting with - I only know
> >> > which users. I
> >> > have tried creating a GPO but it does not seem to apply. I
> >> > have read about
> >> > the Loopback Policy Processing, but it seems you could only
> >> > use this when
> >> > you wan't a user policy to apply to a computer and not the
> >> > opposite:
> >> >
> >> > I hope someone can help me out.
> >> >
> >> > Best Regards
> >> >
> >> > Brian
> >>
> >> Hi,
> >>
> >> You cannot apply Computer GPO's to specific users. You can apply the
> >> "User-Config" of a Computer GPO's to ALL users who login to that
> >> specific computer using the Loopback Policy Processing.
> >>
> >> What is it you are trying to do? What settings do you need to apply
> >> to specific users? Why not use just a Users GPO?
> >>
> >> Cheers,
> >>
> >> Lara
> >>
> >> --
> >> Posted using the http://www.windowsforumz.com interface, at author's
> >> request
> >> Articles individually checked for conformance to usenet standards
> >> Topic URL:
> >>
http://www.windowsforumz.com/Group-Policy-apply-Computer-Config-specific-users-ftopict374769.html
> >> Visit Topic URL to contact author (reg. req'd). Report abuse:
> >> http://www.windowsforumz.com/eform.php?p=1218026
> >
> >
>
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Okay - thank you.

Then I have to make an inventory of all my computers and where the resides.

-Brian

"Bruce Sanderson" <bsanders@junk.junk> skrev i en meddelelse
news:O%23EONOXXFHA.3760@TK2MSFTNGP15.phx.gbl...
> Computer Configuration settings are completely independent of Users. The
> settings are applied to the computer. What user actually logs on at the
> computer makes no difference whatsoever.
>
> There is no fixed relationship between users and computers - a user is
> associated with a particular computer only while they are actually logged
> on.
>
> You will have to know which computers you want the WUS settings applied to
> and put them in an OU to which you link the corresponding GPO. Managing
> the inventory (which computers are in which department and thus which OU)
> is essential to managing computers via GPO.
>
> --
> Bruce Sanderson MVP Printing
> http://members.shaw.ca/bsanders
>
> It is perfectly useless to know the right answer to the wrong question.
>
>
>
> "Brian Nielsen" <brian.heilmann@sletmig_wuerth.dk> wrote in message
> news:OPwjNNRXFHA.160@TK2MSFTNGP15.phx.gbl...
>> Hi,
>>
>> I want to configure WUS (Windows Update Services) to push out updates to
>> specific departments. But I don't know which computers are in which
>> departments because they are renewed pretty often. But I know which users
>> who works in which departments. Therefore I want to push out the WUS
>> policy - which is a computer policy - to these users.
>>
>> I have tried to apply the policy to the OU in which all my workstations
>> resides. I have then defined the security to a specific usergroup. I
>> think this should work but it does not seem to work
>>
>> Hope this helps.
>>
>> Best Regards
>>
>> Brian
>>
>> "lforbes" <UseLinkToEmail@WindowsForumz.com> skrev i en meddelelse
>> news:3_1218026_f751c9924321c0e585ec311b06020e8d@windowsforumz.com...
>>> "Brian Nielsen" wrote:
>>> > Hi,
>>> >
>>> > I am interested in applying computer GPOs to specific users. I
>>> > don't know
>>> > which computers the users are connecting with - I only know
>>> > which users. I
>>> > have tried creating a GPO but it does not seem to apply. I
>>> > have read about
>>> > the Loopback Policy Processing, but it seems you could only
>>> > use this when
>>> > you wan't a user policy to apply to a computer and not the
>>> > opposite:
>>> >
>>> > I hope someone can help me out.
>>> >
>>> > Best Regards
>>> >
>>> > Brian
>>>
>>> Hi,
>>>
>>> You cannot apply Computer GPO's to specific users. You can apply the
>>> "User-Config" of a Computer GPO's to ALL users who login to that
>>> specific computer using the Loopback Policy Processing.
>>>
>>> What is it you are trying to do? What settings do you need to apply
>>> to specific users? Why not use just a Users GPO?
>>>
>>> Cheers,
>>>
>>> Lara
>>>
>>> --
>>> Posted using the http://www.windowsforumz.com interface, at author's
>>> request
>>> Articles individually checked for conformance to usenet standards
>>> Topic URL:
>>> http://www.windowsforumz.com/Group-Policy-apply-Computer-Config-specific-users-ftopict374769.html
>>> Visit Topic URL to contact author (reg. req'd). Report abuse:
>>> http://www.windowsforumz.com/eform.php?p=1218026
>>
>>
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi,

>I want to configure WUS (Windows Update Services) to push out updates
>to specific departments. But I don’t know which computers are in
>which departments because they are renewed pretty often.

Why do you need to do it via department? Why not just let WUS update
everything. Also WUS has a built in "group" section where you can
group computers via OS etc. It is very smart in that it keeps track of
every machine that contacts it and when and whether their updates were
applied.

It sounds very complicated if you don’t know what computers are in
what departments? Anyway, the answer is you cannot do WUS via User.
It is done via computer as the computer contacts the WUS server using
the Network Service account completely independently of a user.

Another thing you could do is introduce some sort of required naming
structure where you have the Department name all their computers
starting with a certain code. This is how I sort my 1200 stations via
department.

Cheers,

Lara