+ Post New Thread
Results 1 to 15 of 15
Windows Server 2008 R2 Thread, GPO filtering in Technical; I'm pushing out our chrome settings via GPO and currently setting up which user types it actually affects. Do I ...
  1. #1

    X-13's Avatar
    Join Date
    Jan 2011
    Location
    /dev/null
    Posts
    9,684
    Thank Post
    641
    Thanked 2,161 Times in 1,478 Posts
    Blog Entries
    19
    Rep Power
    895

    GPO filtering

    I'm pushing out our chrome settings via GPO and currently setting up which user types it actually affects.

    Do I remove "Authenticated Users" to make sure it only applies to the groups I want it to? [Staff, Students and Guests]

  2. #2

    Join Date
    Oct 2012
    Posts
    58
    Thank Post
    7
    Thanked 5 Times in 4 Posts
    Rep Power
    5
    Assuming you link it to the OU(s) where the users you want to get the settings are then leave it as just authenticated user.

    What this means is that only authenticated users in the OU(s) listed under location will get the settings

  3. #3
    zag
    zag is offline
    zag's Avatar
    Join Date
    Mar 2007
    Posts
    3,959
    Thank Post
    970
    Thanked 463 Times in 390 Posts
    Blog Entries
    12
    Rep Power
    95
    Not quite sure I understand, all you need to do is link the Policy to an OU.

  4. #4

    sonofsanta's Avatar
    Join Date
    Dec 2009
    Location
    Lincolnshire, UK
    Posts
    5,268
    Thank Post
    939
    Thanked 1,575 Times in 1,074 Posts
    Blog Entries
    47
    Rep Power
    702
    Yes, and add the groups you do want to have read access.

    (note to others: I believe @X-13 is referring to Security Filtering as found on the Scope tab of a GPO)

    Though I should say, if all the users you want it to apply to are in a single OU, it's more efficient to just add it there. Only do security filtering when the users/machines are dotted all over the place.
    Last edited by sonofsanta; 15th October 2013 at 12:26 PM.

  5. #5

    X-13's Avatar
    Join Date
    Jan 2011
    Location
    /dev/null
    Posts
    9,684
    Thank Post
    641
    Thanked 2,161 Times in 1,478 Posts
    Blog Entries
    19
    Rep Power
    895
    Quote Originally Posted by sonofsanta View Post
    (note to others: I believe @X-13 is referring to Security Filtering as found on the Scope tab of a GPO)
    That's exactly what I was on about.

    Sorry, still trying to actually get chrome to install... I'm looking at about a 90% failure rate and it's pulling it from my ssd rather than the server...

  6. #6

    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,838
    Thank Post
    219
    Thanked 271 Times in 219 Posts
    Rep Power
    69
    just to double check the gpo is a user GPO and your using a user security filter, in an ou for users?

  7. #7

    X-13's Avatar
    Join Date
    Jan 2011
    Location
    /dev/null
    Posts
    9,684
    Thank Post
    641
    Thanked 2,161 Times in 1,478 Posts
    Blog Entries
    19
    Rep Power
    895
    Quote Originally Posted by chazzy2501 View Post
    just to double check the gpo is a user GPO and your using a user security filter, in an ou for users?
    No, it's a custom GPO for the Chrome settings [and JUST the chrome settings] that I want to just apply to staff/students and not to sysadmin.


    And it doesn't matter now any way... my chrome msi has suddenly decided to stop working. Even a new one doesn't work.

  8. #8
    zag
    zag is offline
    zag's Avatar
    Join Date
    Mar 2007
    Posts
    3,959
    Thank Post
    970
    Thanked 463 Times in 390 Posts
    Blog Entries
    12
    Rep Power
    95
    I rolled out the latest Chrome MSI I downloaded fine with GPO.

    I was surprised how well it actually worked! Where did you download it from?

  9. #9

    X-13's Avatar
    Join Date
    Jan 2011
    Location
    /dev/null
    Posts
    9,684
    Thank Post
    641
    Thanked 2,161 Times in 1,478 Posts
    Blog Entries
    19
    Rep Power
    895
    Quote Originally Posted by zag View Post
    I rolled out the latest Chrome MSI I downloaded fine with GPO.

    I was surprised how well it actually worked! Where did you download it from?

    From here: Chrome for Business

    Le EDIT: Turns out RM pushed out the chrome.reg settings I was testing and it borked Google Updater.
    Last edited by X-13; 15th October 2013 at 02:07 PM.

  10. #10
    Duke5A's Avatar
    Join Date
    Jul 2010
    Posts
    842
    Thank Post
    87
    Thanked 144 Times in 122 Posts
    Blog Entries
    8
    Rep Power
    34
    Quote Originally Posted by X-13 View Post
    From here: Chrome for Business

    Le EDIT: Turns out RM pushed out the chrome.reg settings I was testing and it borked Google Updater.
    The Google Updater has it's own policy template separate from Chrome; no need to resort to the dark arts to control it. Google Chrome and Update were actually the easiest things to push and admin that I've done it a while.

  11. #11

    X-13's Avatar
    Join Date
    Jan 2011
    Location
    /dev/null
    Posts
    9,684
    Thank Post
    641
    Thanked 2,161 Times in 1,478 Posts
    Blog Entries
    19
    Rep Power
    895
    Quote Originally Posted by Duke5A View Post
    The Google Updater has it's own policy template separate from Chrome; no need to resort to the dark arts to control it. Google Chrome and Update were actually the easiest things to push and admin that I've done it a while.
    I know. But for some reason, the fact "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Updat es" existed made it impossible to install chrome.

    Hopefully, I've just set it to delete it via GPO [I <3 GPO] and in a bit, possibly tomorrow, I'm having another crack at getting it installed.


    All the settings are applying, but I can't change anything settings wise on my admin account. It's still forced by administrator.
    Last edited by X-13; 15th October 2013 at 03:16 PM.

  12. #12
    zag
    zag is offline
    zag's Avatar
    Join Date
    Mar 2007
    Posts
    3,959
    Thank Post
    970
    Thanked 463 Times in 390 Posts
    Blog Entries
    12
    Rep Power
    95
    Really cool to see administrators allowing Chrome these days.

    Its been a big success in our school since we installed it.

  13. #13

    X-13's Avatar
    Join Date
    Jan 2011
    Location
    /dev/null
    Posts
    9,684
    Thank Post
    641
    Thanked 2,161 Times in 1,478 Posts
    Blog Entries
    19
    Rep Power
    895
    Quote Originally Posted by zag View Post
    Really cool to see administrators allowing Chrome these days.
    Allowing?

    I'm FORCING chrome. I've had enough of IE not working properly.

  14. #14
    Duke5A's Avatar
    Join Date
    Jul 2010
    Posts
    842
    Thank Post
    87
    Thanked 144 Times in 122 Posts
    Blog Entries
    8
    Rep Power
    34
    Quote Originally Posted by zag View Post
    Really cool to see administrators allowing Chrome these days.

    Its been a big success in our school since we installed it.
    It was more out of necessity than anything else for us;IE10 breaks so many pages in completely random ways it is not even funny. Looking at alternative browsers Chrome was the only one that has itself together in an enterprise environment. Firefox is a hot mess and the only enterprise solutions it has are supported by third party.

    But yeah, Chrome has certainly made my life easier. Thank God someone out there knows what they're doing.

  15. #15

    X-13's Avatar
    Join Date
    Jan 2011
    Location
    /dev/null
    Posts
    9,684
    Thank Post
    641
    Thanked 2,161 Times in 1,478 Posts
    Blog Entries
    19
    Rep Power
    895
    Quote Originally Posted by Duke5A View Post
    Thank God someone out there knows what they're doing.
    I'm currently dealing with an exponentially growing userdata folder with no way to limit it.

    Our users have 100mb file space [no problems so far] and I'm looking at an 80mb userdata folder on my account.

    It's supposed to cap at 230mb, but people are talking about it getting into multiple GB.


    Le EDIT: Oh yeah, and pepperflash breaks REAL flash. And has done for about 3 years. [and there's no way to disable it.]
    Last edited by X-13; 16th October 2013 at 02:43 PM.



SHARE:
+ Post New Thread

Similar Threads

  1. Problems with Windows XP / 7 GPOs & WMI Filters
    By smarties11 in forum Windows 7
    Replies: 3
    Last Post: 9th March 2012, 01:35 PM
  2. Replies: 8
    Last Post: 9th October 2006, 11:11 PM
  3. Deploy Software via GPO
    By ICTNUT in forum How do you do....it?
    Replies: 16
    Last Post: 4th July 2006, 05:09 PM
  4. GPO WMI Filters
    By Norphy in forum Windows
    Replies: 2
    Last Post: 9th March 2006, 10:28 AM
  5. Replies: 11
    Last Post: 27th September 2005, 01:30 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •