Sir Posted November 20, 2015 Posted November 20, 2015 PLease can someone help?! I have a user preference GPO mapping drives. It works fine for target-level USER security groups, etc. However, This is what i need to do. Map a final drive for Controlled Assessments. The teacher wants access as they go along completing timed work over a period of weeks. She wants this drive to be visible in 2 computer suites only for years 10 and 11. I have OU's for the computer rooms and security groups for the year groups, etc. I have tried: Item-levelling the two rooms' OU's (17 OR 16) AND USER belongs to YEAR 10 OR YEAR 11. As this is a USER GPO, i tried Loopback MERGE. Didn't work. Without loopback. Didn't work. Mapped drive applied to the COMPUTER OU's with USER item level for the year 10 OR year 11 security groups. With loopback- MERGE. Doesn't work. ANY IDEAS?
jinnantonnixx Posted November 20, 2015 Posted November 20, 2015 (edited) Do you have more than one domain controller? If so, be sure to wait until replication has taken place (or force it). Impatience is a mistake here. The Loopback with Merge should work as this is how to apply user-side settings from a machine policy. Try a simulation in Group Policy Modelling. As it's a simulation, you must make sure that you select only the appropriate WMI filters for the machine (if you use them) as the simulation can't 'know' the physical properties of the machine you intend to run it on. How to use the Group Policy Results Wizard - Virtually Impossible Edited November 20, 2015 by jinnantonnixx 1
zag Posted November 20, 2015 Posted November 20, 2015 May not help, but for controlled assesments we just setup exam accounts that can be locked and unlocked during the lesson. Works quite well. Messing about with Group Policies for this is overkill imo 1
Sephiroth Posted November 20, 2015 Posted November 20, 2015 Try adding the computers to their own group and call that with item level targeting rather than going by OU. that's how I do my printer locational mappings. 1
Sir Posted November 20, 2015 Author Posted November 20, 2015 Thanks indeed all of you. All worth checking out on Monday .in wickes now. I'm a plumber tonight. My gf is going to kill me if the heating and bath don't work by the time she gets home! Definately will pick at those suggestions more with you next week if that is okay? Have a good weekend.
Sir Posted November 27, 2015 Author Posted November 27, 2015 I'm sure i got this right especially with your help but have had to create a CA account as suggested by Zag. I added pcs to a security group but modelling showed that the GPO was DENIED through filtering?!!! The Security Filtering Name was (Global Security Group-) 'Room 16_17 computers' which is the group of pc's that i wanted it to apply to! Grrrrrr
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now