+ Post New Thread
Results 1 to 15 of 15
Windows Server 2008 R2 Thread, GPO filtering in Technical; I'm pushing out our chrome settings via GPO and currently setting up which user types it actually affects. Do I ...
  1. #1

    X-13's Avatar
    Join Date
    Jan 2011
    Location
    /dev/null
    Posts
    8,854
    Thank Post
    588
    Thanked 1,902 Times in 1,315 Posts
    Blog Entries
    19
    Rep Power
    805

    GPO filtering

    I'm pushing out our chrome settings via GPO and currently setting up which user types it actually affects.

    Do I remove "Authenticated Users" to make sure it only applies to the groups I want it to? [Staff, Students and Guests]

  2. #2

    Join Date
    Oct 2012
    Posts
    57
    Thank Post
    7
    Thanked 5 Times in 4 Posts
    Rep Power
    4
    Assuming you link it to the OU(s) where the users you want to get the settings are then leave it as just authenticated user.

    What this means is that only authenticated users in the OU(s) listed under location will get the settings

  3. #3
    zag
    zag is online now
    zag's Avatar
    Join Date
    Mar 2007
    Posts
    3,734
    Thank Post
    893
    Thanked 414 Times in 348 Posts
    Blog Entries
    12
    Rep Power
    85
    Not quite sure I understand, all you need to do is link the Policy to an OU.

  4. #4

    sonofsanta's Avatar
    Join Date
    Dec 2009
    Location
    Lincolnshire, UK
    Posts
    4,818
    Thank Post
    839
    Thanked 1,393 Times in 959 Posts
    Blog Entries
    47
    Rep Power
    602
    Yes, and add the groups you do want to have read access.

    (note to others: I believe @X-13 is referring to Security Filtering as found on the Scope tab of a GPO)

    Though I should say, if all the users you want it to apply to are in a single OU, it's more efficient to just add it there. Only do security filtering when the users/machines are dotted all over the place.
    Last edited by sonofsanta; 15th October 2013 at 11:26 AM.

  5. #5

    X-13's Avatar
    Join Date
    Jan 2011
    Location
    /dev/null
    Posts
    8,854
    Thank Post
    588
    Thanked 1,902 Times in 1,315 Posts
    Blog Entries
    19
    Rep Power
    805
    Quote Originally Posted by sonofsanta View Post
    (note to others: I believe @X-13 is referring to Security Filtering as found on the Scope tab of a GPO)
    That's exactly what I was on about.

    Sorry, still trying to actually get chrome to install... I'm looking at about a 90% failure rate and it's pulling it from my ssd rather than the server...

  6. #6
    chazzy2501's Avatar
    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,774
    Thank Post
    212
    Thanked 263 Times in 213 Posts
    Rep Power
    67
    just to double check the gpo is a user GPO and your using a user security filter, in an ou for users?

  7. #7

    X-13's Avatar
    Join Date
    Jan 2011
    Location
    /dev/null
    Posts
    8,854
    Thank Post
    588
    Thanked 1,902 Times in 1,315 Posts
    Blog Entries
    19
    Rep Power
    805
    Quote Originally Posted by chazzy2501 View Post
    just to double check the gpo is a user GPO and your using a user security filter, in an ou for users?
    No, it's a custom GPO for the Chrome settings [and JUST the chrome settings] that I want to just apply to staff/students and not to sysadmin.


    And it doesn't matter now any way... my chrome msi has suddenly decided to stop working. Even a new one doesn't work.

  8. #8
    zag
    zag is online now
    zag's Avatar
    Join Date
    Mar 2007
    Posts
    3,734
    Thank Post
    893
    Thanked 414 Times in 348 Posts
    Blog Entries
    12
    Rep Power
    85
    I rolled out the latest Chrome MSI I downloaded fine with GPO.

    I was surprised how well it actually worked! Where did you download it from?

  9. #9

    X-13's Avatar
    Join Date
    Jan 2011
    Location
    /dev/null
    Posts
    8,854
    Thank Post
    588
    Thanked 1,902 Times in 1,315 Posts
    Blog Entries
    19
    Rep Power
    805
    Quote Originally Posted by zag View Post
    I rolled out the latest Chrome MSI I downloaded fine with GPO.

    I was surprised how well it actually worked! Where did you download it from?

    From here: Chrome for Business

    Le EDIT: Turns out RM pushed out the chrome.reg settings I was testing and it borked Google Updater.
    Last edited by X-13; 15th October 2013 at 01:07 PM.

  10. #10
    Duke5A's Avatar
    Join Date
    Jul 2010
    Posts
    789
    Thank Post
    79
    Thanked 129 Times in 112 Posts
    Blog Entries
    8
    Rep Power
    31
    Quote Originally Posted by X-13 View Post
    From here: Chrome for Business

    Le EDIT: Turns out RM pushed out the chrome.reg settings I was testing and it borked Google Updater.
    The Google Updater has it's own policy template separate from Chrome; no need to resort to the dark arts to control it. Google Chrome and Update were actually the easiest things to push and admin that I've done it a while.

  11. #11

    X-13's Avatar
    Join Date
    Jan 2011
    Location
    /dev/null
    Posts
    8,854
    Thank Post
    588
    Thanked 1,902 Times in 1,315 Posts
    Blog Entries
    19
    Rep Power
    805
    Quote Originally Posted by Duke5A View Post
    The Google Updater has it's own policy template separate from Chrome; no need to resort to the dark arts to control it. Google Chrome and Update were actually the easiest things to push and admin that I've done it a while.
    I know. But for some reason, the fact "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Updat es" existed made it impossible to install chrome.

    Hopefully, I've just set it to delete it via GPO [I <3 GPO] and in a bit, possibly tomorrow, I'm having another crack at getting it installed.


    All the settings are applying, but I can't change anything settings wise on my admin account. It's still forced by administrator.
    Last edited by X-13; 15th October 2013 at 02:16 PM.

  12. #12
    zag
    zag is online now
    zag's Avatar
    Join Date
    Mar 2007
    Posts
    3,734
    Thank Post
    893
    Thanked 414 Times in 348 Posts
    Blog Entries
    12
    Rep Power
    85
    Really cool to see administrators allowing Chrome these days.

    Its been a big success in our school since we installed it.

  13. #13

    X-13's Avatar
    Join Date
    Jan 2011
    Location
    /dev/null
    Posts
    8,854
    Thank Post
    588
    Thanked 1,902 Times in 1,315 Posts
    Blog Entries
    19
    Rep Power
    805
    Quote Originally Posted by zag View Post
    Really cool to see administrators allowing Chrome these days.
    Allowing?

    I'm FORCING chrome. I've had enough of IE not working properly.

  14. #14
    Duke5A's Avatar
    Join Date
    Jul 2010
    Posts
    789
    Thank Post
    79
    Thanked 129 Times in 112 Posts
    Blog Entries
    8
    Rep Power
    31
    Quote Originally Posted by zag View Post
    Really cool to see administrators allowing Chrome these days.

    Its been a big success in our school since we installed it.
    It was more out of necessity than anything else for us;IE10 breaks so many pages in completely random ways it is not even funny. Looking at alternative browsers Chrome was the only one that has itself together in an enterprise environment. Firefox is a hot mess and the only enterprise solutions it has are supported by third party.

    But yeah, Chrome has certainly made my life easier. Thank God someone out there knows what they're doing.

  15. #15

    X-13's Avatar
    Join Date
    Jan 2011
    Location
    /dev/null
    Posts
    8,854
    Thank Post
    588
    Thanked 1,902 Times in 1,315 Posts
    Blog Entries
    19
    Rep Power
    805
    Quote Originally Posted by Duke5A View Post
    Thank God someone out there knows what they're doing.
    I'm currently dealing with an exponentially growing userdata folder with no way to limit it.

    Our users have 100mb file space [no problems so far] and I'm looking at an 80mb userdata folder on my account.

    It's supposed to cap at 230mb, but people are talking about it getting into multiple GB.


    Le EDIT: Oh yeah, and pepperflash breaks REAL flash. And has done for about 3 years. [and there's no way to disable it.]
    Last edited by X-13; 16th October 2013 at 01:43 PM.

SHARE:
+ Post New Thread

Similar Threads

  1. Problems with Windows XP / 7 GPOs & WMI Filters
    By smarties11 in forum Windows 7
    Replies: 3
    Last Post: 9th March 2012, 12:35 PM
  2. Replies: 8
    Last Post: 9th October 2006, 10:11 PM
  3. Deploy Software via GPO
    By ICTNUT in forum How do you do....it?
    Replies: 16
    Last Post: 4th July 2006, 04:09 PM
  4. GPO WMI Filters
    By Norphy in forum Windows
    Replies: 2
    Last Post: 9th March 2006, 09:28 AM
  5. Replies: 11
    Last Post: 27th September 2005, 12:30 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •