Windows Thread, Active Directory Structure: Teacher and Student computers in Sub-OU of user or root? in Technical; I am having some confusion as to how computer side GPO settings will be applied when a teacher logs in ...
26th August 2012, 07:37 AM #1
- Rep Power
Active Directory Structure: Teacher and Student computers in Sub-OU of user or root?
I am having some confusion as to how computer side GPO settings will be applied when a teacher logs in at a student computer depending on the AD structure.
I have our AD structure with student users in one OU and Teachers in another OU right below the domain. The Teacher and Student OU's are not sub OU's of one another to make sure that privileges do not flow from one group to the other. I also have the student computers in a sub-OU of Students and Teacher computers in a sub-OU of Teachers. I feel that in doing this I will have issues when a teacher sits down at a student computer. I haven't completely tested it but I think the teacher will get the computer settings from the Student GPO that is applied to the Student OU when the student computer is in a sub-OU. Should the teacher and student computers be in OU's at the root of the domain like the user OU's are and then when a user logs in the computer side settings of the GPO for the student or teacher will just apply to the computer? So basically should I think of it as GPO settings are based on login and therefore follow the user which is applied to the computer the user is logged into?
-Student Computer OU
-Teacher Computer OU
IDG Tech News
26th August 2012, 07:43 AM #2
This way you can have common policies that apply to both and just the differentiated stuff apply to the sub users.
AD handles policies in two ways, by machine and by user
User policies are handled by user logon (user objects in AD)
Machine policies are applied to machine objects in AD (ie computers)
By kennysarmy in forum Windows
Last Post: 1st October 2009, 05:16 PM
Last Post: 24th June 2009, 11:10 AM
By danIT in forum MIS Systems
Last Post: 18th June 2008, 06:17 PM
By baronne in forum Windows
Last Post: 26th February 2007, 11:33 AM
By Dos_Box in forum Books and Manuals
Last Post: 29th October 2006, 04:01 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)