Adrian Marsh (NNTP) Guest
|
Posted: Wed May 17, 2006 1:41 pm Post subject: User Configurations on OUs outside of users OU |
|
|
Hi,
I've an AD layout like below with the following OUs:
Domain
-----> 2000 Workstations OU
-----> Servers OU
-----> XP Workstations OU
-----> Laptops OU
(basic list)
The user "labuser" is defined in the "2000 Workstations", and can login
to any machine listed in the "2000 Workstations" AND the "XP
Workstations", but not the Servers. This is because "labuser" is in a
Restricted Group (another GPO for Admin rights) and that is linked to
the "XP Workstations" OU.
My problem is, that I want to change a user-GPO policy for labuser,
specifically on the Laptops GPO, but not have it affect the others.
Specifically, I want to disable the screensaver.
When I go to a GPO defined in Laptops (i.e. the Laptops GPO), and make
the change there, it has no effect on "labuser" - I'm guessing because
they are "defined" in the "2000 Workstations" GPO, and only the GPOs
defined in that OU take effect on "labuser" - right ?
So where would I implement the change? |
|