Since the computer (not the user) is in OU2 with inheritance blocked, you are only preventing the user from getting the computer policy, Based on what you have set up, the user will get the user policy no matter what OU his computer is in.
The results you are getting are consistent with what you have configured, so perhaps you can tell us what you are trying to accomplish. :-)
Michael Parent MCSE MCT
Analyst (Microsoft Web / Directory Services)
CGI
(902) 453-7300 x3456
"Rosales, Mario" <[EMAIL PROTECTED]>
Sent by: [EMAIL PROTECTED] 11/12/2004 10:24 AM
|
To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]> cc: Subject: RE: [ActiveDir] OU and Policies |
Correction
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rosales, Mario
Sent: Friday, November 12, 2004 8:06 AM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] OU and Policies
Ok have a question hopefully some of you out there could help me out.
We have
MAINOU->OU1
MAINOU->OU2 <-Block Policy Inheritance)
MAINOUT-> USER POLICY (Lock Down ScreenSaver Settin
MAINOUT-> COMPUTER POLICY (Other Policy Settings) Enforced
user1 in OU1
Computer1 in ou2
When user1 logs in - the settings of User Policy still apply.
Am I doing something wrong?
Hope that makes sense
Thanks,
Mario
***************************************************************************
The contents of this communication are intended only for the addressee and
may contain confidential and/or privileged material. If you are not the
intended recipient, please do not read, copy, use or disclose this
communication and notify the sender. Opinions, conclusions and other
information in this communication that do not relate to the official
business of my company shall be understood as neither given nor endorsed by
it.
***************************************************************************
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
***************************************************************************
The contents of this communication are intended only for the addressee and
may contain confidential and/or privileged material. If you are not the
intended recipient, please do not read, copy, use or disclose this
communication and notify the sender. Opinions, conclusions and other
information in this communication that do not relate to the official
business of my company shall be understood as neither given nor endorsed by
it.
***************************************************************************
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/