+ Post New Thread
Results 1 to 6 of 6
Windows Server 2008 R2 Thread, Deny Group Policy in Technical; Hi, I'm wanting to deny a policy to a computer. I have a number of PC's in an OU but ...
  1. #1

    Join Date
    Nov 2007
    Location
    Rotherham
    Posts
    1,679
    Thank Post
    122
    Thanked 126 Times in 102 Posts
    Rep Power
    46

    Deny Group Policy

    Hi,
    I'm wanting to deny a policy to a computer. I have a number of PC's in an OU but there is 1 PC in the department that I do not want the policy to be applied to. Now I could go down the route of reorganising my AD structure but it's going to complicate it and it's a bit needless if I can do, as I could in 2003 server deny the policy application to a PC/Group.

    Can I do it under the deligation tab? The scope tab just lists who the policy is appied to...

    any suggestions.

  2. #2

    ZeroHour's Avatar
    Join Date
    Dec 2005
    Location
    Edinburgh, Scotland
    Posts
    5,837
    Thank Post
    974
    Thanked 1,406 Times in 851 Posts
    Blog Entries
    1
    Rep Power
    460
    Delegation then Advanced button should put you on familiar ground

  3. Thanks to ZeroHour from:

    Stuart_C (6th October 2010)

  4. #3

    Join Date
    Nov 2007
    Location
    Rotherham
    Posts
    1,679
    Thank Post
    122
    Thanked 126 Times in 102 Posts
    Rep Power
    46
    Well yesterday I thought it was there and today when I looked it turns out that not only is it there but I had already set up the security to block it. It turns out it stopped working.....

    I made changes to another policy (Policy 2) on that OU and enabled group policy loopback processing in merge mode. For some reason, despite being blocked from reading and applying the policy in question (Policy 1) it still applied. when I disabled loopback processing on policy 2, policy 1 stopped being applied. How strange. And irritating.

  5. #4

    ZeroHour's Avatar
    Join Date
    Dec 2005
    Location
    Edinburgh, Scotland
    Posts
    5,837
    Thank Post
    974
    Thanked 1,406 Times in 851 Posts
    Blog Entries
    1
    Rep Power
    460
    Quote Originally Posted by Stuart_C View Post
    I made changes to another policy (Policy 2) on that OU and enabled group policy loopback processing in merge mode. For some reason, despite being blocked from reading and applying the policy in question (Policy 1) it still applied. when I disabled loopback processing on policy 2, policy 1 stopped being applied. How strange. And irritating.
    I have to say I am experiencing similar things with loopback and my ts policies. Hmmmmm

  6. #5

    Join Date
    Nov 2007
    Location
    Rotherham
    Posts
    1,679
    Thank Post
    122
    Thanked 126 Times in 102 Posts
    Rep Power
    46
    Have we found an actual bug? Or are we both making the same mistake?

  7. #6

    Join Date
    Jan 2006
    Location
    Surburbia
    Posts
    2,178
    Thank Post
    74
    Thanked 307 Times in 243 Posts
    Rep Power
    116
    Have never checked, but I would definitely expect loopback GPOs to be processed in the User context, so security-filtering loopback GPOs for one or more computers will not have any effect.



SHARE:
+ Post New Thread

Similar Threads

  1. Group Policy
    By Neville in forum Windows
    Replies: 2
    Last Post: 6th May 2008, 01:17 PM
  2. Group policy
    By ricki in forum Wireless Networks
    Replies: 5
    Last Post: 29th February 2008, 02:40 PM
  3. Group Policy OU's
    By iownitcouk in forum Windows
    Replies: 3
    Last Post: 23rd February 2008, 03:24 PM
  4. Group Policy
    By jman167 in forum Windows
    Replies: 1
    Last Post: 28th June 2007, 11:27 PM
  5. Group Policy
    By faza in forum Windows
    Replies: 15
    Last Post: 23rd May 2006, 10:39 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •