+ Post New Thread
Results 1 to 8 of 8
Windows Thread, AD, GPO, WMI - In relation to blocking inheritence in GPMC in Technical; Bare with me as ill try to explain fully so people could possibly give an alternative method. Im just about ...
  1. #1


    Join Date
    Oct 2006
    Posts
    3,411
    Thank Post
    184
    Thanked 356 Times in 285 Posts
    Rep Power
    148

    AD, GPO, WMI - In relation to blocking inheritence in GPMC

    Bare with me as ill try to explain fully so people could possibly give an alternative method.


    Im just about to deploy Lanview via GPO. The structure of AD is such that the teachers machine is i a seperate OU, but within the rooms OU;

    ICT Rooms¬
    ---------------R46¬
    ---------------------Teacher
    ---------------R47¬
    ---------------------Teacher


    When i made it this way i thought id be alright as "anything i want to deploy to the kids im sure ill want on the teachers machine" - how wrong was i

    Problem is with this structure when i deploy the Lanview Client it will go on the teachers machine - this i dont want as if she knocks the kids internet off, it will also knock hers off! opps!

    I could restructure AD, but tbh this would be abit of a pain to do while Live.

    I could stop inheritence of GPOs, but that would mean id have to link all other GPOs directly, or enforce them but this kills that option for the time when i *really* need to use "enforce/block inheritence"

    WMI filters?????? Never even looked at them at all so... Can i adapt one for my purpose? And how would i achieve it? Any guides/pointers? :beer:

    Or any other ideas?

  2. #2
    mrforgetful's Avatar
    Join Date
    May 2006
    Posts
    1,637
    Thank Post
    7
    Thanked 15 Times in 15 Posts
    Rep Power
    22

    Re: AD, GPO, WMI - In relation to blocking inheritence in GPMC

    I've never used them either sorry, but I will say that here if a room's internet goes off, it's off for the teacher aswell, only fair! lol

  3. #3

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,802
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: AD, GPO, WMI - In relation to blocking inheritence in GPMC

    Use a security filter.

    1. Make a domain group called 'Teachers PCs', add all the computer accounts to this group.
    2. Create your GPO in the GPMC and view it.
    3. Go to the security filtering section and remove the 'Authenticated Users' filter.
    4. Add your 'Teachers PCs' group as a security filter.

  4. #4

    mac_shinobi's Avatar
    Join Date
    Aug 2005
    Posts
    9,680
    Thank Post
    3,210
    Thanked 1,030 Times in 955 Posts
    Rep Power
    361

    Re: AD, GPO, WMI - In relation to blocking inheritence in GPMC

    how many posts are you making geoff lol ?

  5. #5

    GrumbleDook's Avatar
    Join Date
    Jul 2005
    Location
    Gosport, Hampshire
    Posts
    9,922
    Thank Post
    1,332
    Thanked 1,774 Times in 1,101 Posts
    Blog Entries
    19
    Rep Power
    593

    Re: AD, GPO, WMI - In relation to blocking inheritence in GPMC

    You could create 2 sub-OUs ... teacher and classroom. You then apply the GPO for the LANview install to just the classroom OU.

  6. #6
    Bestbett's Avatar
    Join Date
    Apr 2007
    Location
    Hiding
    Posts
    46
    Thank Post
    4
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: AD, GPO, WMI - In relation to blocking inheritence in GP

    Would a quick fix be to simply remove the "teachers" group from read permissions of the file that the script is pointing at? May get a little error but assuming they already have a group this seems like a quick way to prevent them from having it installed.

  7. #7


    Join Date
    Oct 2006
    Posts
    3,411
    Thank Post
    184
    Thanked 356 Times in 285 Posts
    Rep Power
    148

    Re: AD, GPO, WMI - In relation to blocking inheritence in GP

    Cheers people. You know sometimes i over complicate things...

    If i were to create another OU and move the pupil PCs in would teh software redeploy? Or would it just leave as is?

  8. #8
    metalmonkey
    Guest

    Re: AD, GPO, WMI - In relation to blocking inheritence in GP

    Only just spotted this - so I apologise. I knows it's probably too late.

    No need to change your AD in any way.

    Carry on as you are. LanView 3 has the ability to ignore certain users. Add the teacher/s to the ignored user's group and they will never have the web banned.

    In the same manner - if a pupil logs on to the teachers PC, their internet will be banned. This would be the problem by using AD Block inheritance.

SHARE:
+ Post New Thread

Similar Threads

  1. GPMC - File System
    By j17sparky in forum Windows
    Replies: 2
    Last Post: 19th June 2007, 12:06 PM
  2. Audacity, LAME & GPMC
    By j17sparky in forum Windows
    Replies: 1
    Last Post: 2nd February 2007, 12:22 PM
  3. Blocking .exe
    By lee_sri in forum Windows
    Replies: 5
    Last Post: 22nd March 2006, 07:43 PM
  4. Help and advice on using the GPMC
    By standunstan in forum Windows
    Replies: 6
    Last Post: 21st March 2006, 09:46 PM
  5. GPMC "Access Denied" for Administrator
    By Gatt in forum Windows
    Replies: 9
    Last Post: 8th February 2006, 06:25 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •