Kamlesh-
You probably already noticed this but just a minor point
that the ordering of the GPO DNs in the gpLink attribute affect the order
in which they are processed. So appending a GPO to the end of the existing
gpLink attribute puts in number one in the priority list for that container.
Just something to keep in mind.
Darren
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kamlesh Parmar
Sent: Wednesday, March 01, 2006 12:07 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Link single GPO to multiple OUs using script or something
I looked at the _vbscript_ code, what it does is, takes the current links into variable and appends our new link at the end and reattaches the whole new bunch to OU again.
I thought since admod has a feature of append (+,++ operators), I might not have to do the read current links + append-new + reattach. just appending might work.
but it turns out gplink is single-value-attribute so have to follow the same route.
I have gone ahead with _vbscript_ and modified to my requirement.
At the same time I have the adfind+admod script also ready ( just to learn admod.exe better)
--
Kamlesh
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Be the change you want to see in the World"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
On 3/1/06, Ulf B.
Simon-Weidner <[EMAIL PROTECTED]>
wrote:
Should be working - just create a example OU with the specific settings, adfind gPLink and gPOptions into variables (actually gPOptions: read it once and set it statically without reading in a variable) and use admod to write the gPLink and gPOptions-attributes of the other OUs.Ulf
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Kamlesh ParmarSent: Wednesday, March 01, 2006 8:55 AMSubject: Re: [ActiveDir] Link single GPO to multiple OUs using script or somethingThanx, I will test it out :-)
moreover, I will see if I can create a combination of adfind and admod to achieve this.
--
Kamlesh
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Be the change you want to see in the World"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
On 2/28/06, Ulf B. Simon-Weidner <[EMAIL PROTECTED]> wrote:You can do this with a simple VBS, LDIF-File or whatever is convenient for you to change AD since you only need to modify the gPLink- and gPOptions-Attributes. Look at the following example from the Technet Scriptcenter:Gruesse - Sincerely,
Ulf B. Simon-Weidner
MVP-Book "Windows XP - Die Expertentipps": http://tinyurl.com/44zcz
Weblog: http://msmvps.org/UlfBSimonWeidner
Website: http://www.windowsserverfaq.org
Profile: http://mvp.support.microsoft.com/profile="">
From: [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED]] On Behalf Of Kamlesh Parmar
Sent: Monday, February 27, 2006 11:12 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Link single GPO to multiple OUs using script or somethingBasically, we have > 50 Location OUs each having different sub OUs for servers, desktops, laptops.
My problem is I want to apply policy to all laptops, but I don't have all laptops with XP, some are win2K.
So can't use a WMI query to filter out dekstops and servers and create single policy.
So only option left is create a policy and link it to so many OUs.
Is it possible to link a single GPO to multiple OUs using script or utility like admod.exe
Thanks in advance
--
Kamlesh
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Be the change you want to see in the World"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~