Re: Group policy

From: Steven L Umbach (n9rou@attbi.com)
Date: 04/02/03


From: "Steven L Umbach" <n9rou@attbi.com>
Date: Tue, 01 Apr 2003 23:31:35 GMT


       There are two parts to group policy - computer configuration and user configuration. Each part is applied to the computer or user based on their container location. By default domain policy applies to all users and computers in the default users and computers containers. You can change that by creating Organizational Units that can have their own group policy that can override or supplement domain group policy depending on how the OU is configured as far as blocking inheritance of group policy unless a "higher level" policy has no override enforced. Account policy for a domain users can only be applied at the domain policy level . Computers and users will have to be moved to a particular OU to have the effective policy for that OU apply to them. Having said all that, ordinarily group policy effective user configuration applies to a user based on their container membership and has no bearing on which domain computer they are logged onto. There is one exception you may be able to look into. Using loopback policy processing where you can configure a user to have different policy applied to it based on the computer they are logged onto using a merge or replace mode. However I doubt this is what you are looking into because the loopback processing would apply to all users that log onto the computer using it and it is somewhat restricted in what can be configured. --- Steve

http://support.microsoft.com/?kbid=231287

"Edward Ferraioli" <eferraioli@nj.rr.com> wrote in message news:05d301c2f88e$b2ced8a0$3001280a@phx.gbl...
> I have a user that logs on to 2 different APP Servers at
> the same time through terminal server. He need to access
> two different different resources on the servers. How can
> I apply different group policy to server that wont effect
> him when he logs on the other server



Relevant Pages

  • Re: passing local printers through remote desktop
    ... If you log into the server as an admin can you see any ... Found nothing in the event logs. ... scheme is 192.168.x.x and the terminal server is part of a domain. ...
    (microsoft.public.windows.terminal_services)
  • RE: isa 2004 & external website access issue
    ... emailed the logs to you as requested. ... each web server has its own public IP ... > headers in ISA Server ... > 'Microsoft Firewall' service. ...
    (microsoft.public.windows.server.sbs)
  • RE: Exchange Server
    ... I researched your logs and found the MSExchangeTransport events 4006, 969, ... Right click Default SMTP Virtual Server and select Properties. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: OWA 2003 with ISA 2004
    ... OWA externally. ... i can login by any user. ... 825763 How to configure Internet access in Windows Small Business Server ... g. Reproduce this issue and send the logs to me. ...
    (microsoft.public.windows.server.sbs)
  • RE: OWA 2003 with ISA 2004
    ... I understand that you can not login OWA from ... 825763 How to configure Internet access in Windows Small Business Server ... g. Reproduce this issue and send the logs to me. ... and then right click 'Microsoft Firewall' to ...
    (microsoft.public.windows.server.sbs)