Group Policy - How to make User Config > Computer Config?

[FN-GM]

Hi

I want to set a policy that comes under User Configuration but to apply per computer not per user.

Is this possible?

Z

[djm968]

You need to enable Loopback Policy Processing within the GPO.

Sorry just read your post again!

Loopback processing will apply the USER settings to all users that logon. to Not sure if this is what you need.

The other option is to write a script to modify the HKLM Registry Keys at user logon.

[Nij.UK]

can you not just apply the gpo to and ou full of computers and this will have the same effect?

therefore any user that logs into a machine which has user settings configured as part of the GPO will apply

[FN-GM]

can you not just apply the gpo to and ou full of computers and this will have the same effect?

therefore any user that logs into a machine which has user settings configured as part of the GPO will apply

Does that work?

[mrforgetful]

No.

User Config settings will ONLY apply to users in the OU that policy is applied to.

Computer Config settings will ONLY aaply to computers in OU the policy is applied to.

If you create a policy with Computer Config settings in and apply it to an OU that only has User Accounts in it, that policy will do nothing.

[ChrisH]

You will need loopback policy processing but be warned now it doesnt always work perfectly in my experience.

[mrforgetful]

Yeh unless you use Loopback....but I'd advise you stay away unless your eyes depend on it. Makes troubleshooting a nightmare

[Halfmad]

Hi

I want to set a policy that comes under User Configuration but to apply per computer not per user.

Is this possible?

Z

What is it you're trying to do? chances are someones already found a way of doing it

[FN-GM]

Well i have the adm files for ranger, and you can set a user so it can only connect to certain machines. I would like to use this but per computer not user.

So for example user 1 can logon to the library control and use ranger but only connect to the library machines. But then user 1 can logon to the ICT room control and open ranger again and then control the ICT room computers only.

How do i do loopback please?

[FN-GM]

Bump

How do i do loopback please?

Z

[ChrisH]

Patience grasshopper! Comp configuration > admin templates > System > Group Policy of the GPO you want to enable loopback.

[FN-GM]

Cheers mate

[mark]

Be pepared for stuff to stop working

[link470]

Be pepared for stuff to stop working

:O What kind of stuff? I was just about to implement this.

[FN-GM]

I would test the policies first, depends what you are doing. If its home pages it shouldn't cause any problems.

Z