limiting loopbacked policies.

[browolf]

trying to apply a policy to just a room but i can only get it to apply to either everything or nothing.

 

the policy has a user component applied to computers only using loopback.

 

in security filtering if I put just a group containing the computers, the policy is applied in the computer config and denied in user config and looses in the settings.

 

if i put in domain users as well the policy is denied for "other" computers, but applied using domain users and wins on the settings for all computers.

 

i forgot to mention the policy in question, overrides a higher up policy by way of merge. I dont think i can do override as there's lots of other stuff in the higher up one.

 

 

I cant see a way to make this work

Edited October 15, 2008 by browolf

[matt40k]

Bit confussed.

 

You want a user policy applied by computers? Didn't think you could do this. Prob wrong.

 

Have you set it to no override?

[penfold]

Have you seperated your computers into rooms that you want to configure? If you have seperated the computers you want the settings to apply to into their own OU and put the room policy in only that OU, those settings should only apply to any computer in that OU. For example you can have IT, Technology, Music Etc, each with their own OU and individual group policy settings for that OU(subject).

 

If you have done it at a higher level, the settings will apply to all computers.

Edited October 15, 2008 by penfold

[browolf]

Bit confussed.

 

You want a user policy applied by computers? Didn't think you could do this. Prob wrong.

 

Have you set it to no override?

 

 

thats what loopback processing is for.

 

cant use override as im trying to override a single setting in a higher up policy.

[browolf]

Have you seperated your computers into rooms that you want to configure? If you have seperated the computers you want the settings to apply to into their own OU and put the room policy in only that OU, those settings should only apply to any computer in that OU. For example you can have IT, Technology, Music Etc, each with their own OU and individual group policy settings for that OU(subject).

 

If you have done it at a higher level, the settings will apply to all computers.

 

yeah we do have that but security filters is supposed alleviate the need to have the same policy attached to different locations and actually im applying this to a room and a few pcs in our office. i'll post a screen shot tomorrow, that might help.

[browolf]

screenshot is here

linked so it's readable and the size isnt reduced.