I have already enabled the loopback to get the user settings to apply, so filtering by computer should work OK, cool.
I like to keep all the GPOs separate too, but this is the final throes of a dying domain. I'd have had the servers in separate sub-OUs of an empty OU if it had been up to me, and I'd therefore have avoided this whole issue :-) On 28 October 2010 12:34, Ken Schaefer <k...@adopenstatic.com> wrote: > You are on the right track. Add Loopback Policy Processing to the mix. > > > > Personally, I usually separate out computer and user settings, unless > there’s a compelling reason not to (the settings are closely linked for > applicability reasons) or you only have a small number of GPOs > > > > Cheers > > Ken > > > > *From:* James Rankin [mailto:kz2...@googlemail.com] > *Sent:* Thursday, 28 October 2010 4:10 PM > *To:* NT System Admin Issues > *Subject:* Filtering a GPO by computer > > > > I have a logon script GPO for some terminal server users that I want to > apply to a specific OU, but not the sub-OUs, and I don't want to use the > "Block Inheritance" feature. Can I security filter the GPO by a computer > group, or will this stop the GPO from running as it contains some user > settings? > > This is a Windows 2003 domain. > > TIA, > JRR > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe ntsysadmin > -- "On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question." ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
