I have different OU's set up for each department in the school but i set the GPO's for students under the pupil / students folder same for staff the only GPO i have for the stations would be installing software per department.
How can i run different policies for pupils and staff depending on which machine they are logged into. I have planned to come in and create two different OU's (XP and 7) and then create the departments in each of those depending on the OS on the computers. But if i have policies already set up for when a pupil logs in not depending on what computer they log in this wont work.
What you want to do is filter the user group policies with the WMI querys, the machines can be organised by OUs so that only 7 or xp machines are in them and so policies are easy there.
You will want two seporate user policies one for XP and one for 7 that configure the users appropriatly for whatever OS they log on to. The first step would be to use a filter to make your existing policies for staff/students apply only to XP then make new ones for 7 and filter those for only 7. You can then add each of these to your user container and it will only apply the one that applies to the right OS at logon.
These are the 2 we use
Vista and NewerCode:SELECT Version FROM Win32_OperatingSystem WHERE Version < "6"
Code:SELECT Version FROM Win32_OperatingSystem WHERE Version > "6"
so i create a filter and link it to all of my xp ones the filter is something like this is it?
Select * from Win32_OperatingSystem where Caption = " Microsoft Windows XP Professional"
is that right for the windows xp filters
we are only running all 32bit at the moment havent really taken a look at running 64 bit although we do have a couple of vista laptops but i am sure if i manage to get this working could i not create another filter for vista?
I have linked all my polices at the moment now to Windows XP filter just going to test to make sure that nothing has changed regards pupils accounts and staff accounts.
From here then do i start making new GPO's and apply a windows 7 professional filter to these?
great thank you just noticed now that some things have changed when i have applied the filters, i had it set up that pupils could not change the name of my computer or my documents or if it did it just reset back to normal when they logged off but now it hasnt also my network places has appeared on their desktops
i have a classic ADM running would this have been affected by the change?
or is it because i use local profiles i would need to delete all the profiles before anything would take affect? because its possible there local profile has held something before the change which is why they are maybe seeing things that they shouldnt because the policies all look right nothing really changed other than the filters.
Check what policies are being applied with the RSoP snapin in the MMC.exe if your filter was a little off it will stop applying, ie your above one had an extra space in it which would stop it from applying at all.
Edit: should not need to delete them but some setting do stick so it may not be a bad idea.
Ah i had a space at the " Microsoft" instead of "Microsoft"
no ive changed the name back and for some reason some of the polices are not apply i dont know what ive done wrong ill change it back here for the mean time because pupils and some staff have lost there my documents link
There are currently 1 users browsing this thread. (0 members and 1 guests)