Re: Group policy

From: Andy Jiang (ajiang@lumley.co.nz)
Date: 07/31/02 

From: "Andy Jiang" <ajiang@lumley.co.nz>
Date: Tue, 30 Jul 2002 22:09:00 -0700

Hi Paul

Thank very much for your help.

I believe you are right, what I am not happy is the list
of RSOP.msc. Look at the attached doc file pls, why it
says user ouuser01 on machine WINXP0001 has got this
computer configuration? At least as a new user I am
confused.
Ouuser01 is domain user, WINXP0001 in domain and OU.

If Computer configuration has something to with users
logging on (domain, local users) in my case as I links
GPOs to OU, is it possible I can see the effecting
computer configuration for this user?

Regards

Andy Jiang

>-----Original Message-----
>In article <34d101c2383a$d1d2ffc0$37ef2ecf@TKMSFTNGXA13>,
>ajiang@lumley.co.nz says...
>> Thanks Paul
>>
>> The group policy is very frustrating.
>> 1. It seems to me I cannot trust the result of
Resultant
>> Set of Policy. RSOP tells me domaim1\user1 on PC1
should
>> have password at least 7 Char, but not true.
>
>It is true. You're confusing domain user accounts and
local user
>accounts. In your case, RSOP is not telling you that
domain\user1 needs
>to have a password of at least 7 characters. Because you
linked the GPO
>to the OU, rather than the domain, what RSOP is telling
you is that any
>local accounts on that computer must have at least 7
characters in their
>password.
>
>>
>> 2. If a GPO is linked to a OU which has only one
memeber
>> called domain1/user1 , the GPO specifies something in
>> Computer configuration like password, then
domain1/user1
>> logs on to a XP PC called PC1 which is in domain1 but
not
>> in OU, will computer configuration parts of the GPO
takes
>> effect?
>
>No, they won't.
>
>> In my test, they did not.
>
>As expected.
>
>> Does this mean to make
>> computer configuration part of the GPO work, the logged
on
>> PC should be in the OU as well?
>
>Yes.
>
>>
>> 3. Is there any document about GPO and its computer
>> configation, user configuration , their relations
between
>> log on users and log on computer, Domain controller?
>
>Lots, check the Microsoft web site.
>
>>
>> Thanks.
>>
>> Regards
>>
>
>--
>Paul Adare
>Everyone is left-handed until they commit their first sin.
>.
>

Relevant Pages

  • Re: Group Policy Management Console
    ... I can't comment on brain farting (at least right now although I do my fair ... The GPO is split to Computer Configuration and User Configuration. ... > I've got my users that are located in that city. ...
    (microsoft.public.windows.group_policy)
  • Re: Group policy
    ... > The group policy is very frustrating. ... You're confusing domain user accounts and local user ... Because you linked the GPO ... will computer configuration parts of the GPO takes ...
    (microsoft.public.windowsxp.security_admin)
  • Re: GPO Computer Setting - Ccan they be applied to Users ?
    ... This leads on to my question - can the computer configuration part of a gpo be applied to user objects (or rather to OUs that contain user objects - I'm guessing NO - ... Am I right in saying I'll need to configure OUs to put my computer objects in and apply a GPO that contains the computer configuration settings - I was trying to avoid this. ...
    (microsoft.public.win2000.active_directory)
  • Re: Will "Computer Configuration" policies that are applied at the OU level get passed dow
    ... > I have an OU called Florida that contains all of my users in Florida. ... > attach a Group Policy to this OU that contains Computer Configuration ... > settings, ... you'll need to link a GPO to the OU where your computer accounts ...
    (microsoft.public.win2000.group_policy)
  • Re: Windows updates GP setting question
    ... Since this setting is in the Computer Configuration part of the GPO, it will apply to the computers whos computer account is in the scope of the GPO regardless of where the logged on user's account is defined. ... I plan on adding a group policy to all domain computers that makes it so they never restart after a windows update. ... Everyone computer is on the domain however not all user accounts are on the domain - some will have NT accounts. ...
    (microsoft.public.windows.group_policy)