RE: [ActiveDir] GPO loopback again...
Ok, Thanks for the input, I'll try to find out another way to achieve what is requested... there must be user policies combination that may get the result wanted... > -Message d'origine- > De : [EMAIL PROTECTED] [mailto:ActiveDir- > [EMAIL PROTECTED] De la part de [EMAIL PROTECTED] > Envoyé : Wednesday, March 16, 2005 2:50 PM > À : ActiveDir@mail.activedir.org > Objet : Re: [ActiveDir] GPO loopback again... > > Hi Michel, > > I don't believe there is a loop back equivalent to do what you want. > > I am not exactly sure what you mean by "restrict installation process". If > you mean to install and deinstall software for a given user, you can do > that > via the User part of the policy. If you mean "Change some machine registry > keys", you could write a script to do it, but remember you are running in > the user context and so may not have access to change the key. > > Alan Cuthbertson > > > Policy Management Software:- > http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml > ADM Template Editor:- > http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml > Policy Log Reporter(Free) > http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml > > > - Original Message - > From: "Bruyere, Michel" <[EMAIL PROTECTED]> > To: > Sent: Wednesday, March 16, 2005 6:42 AM > Subject: [ActiveDir] GPO loopback again... > > > Hi, > After testing things out with the loopback i still can't do > something and i'm wondering if it posible to do it. > > With the loopback it's possible to make a user defined policy on a > computer basis, but is it possible to make a computer defined policy on > a user basis? > > What I wanna do is to restrict installation process and things like this > but on a user basis to avoid having to move the computer account in and > out of the UO. > > > Thanks for your help! > > List info : http://www.activedir.org/List.aspx > List FAQ: http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > List info : http://www.activedir.org/List.aspx > List FAQ: http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] GPO loopback again...
Hi Michel, I don't believe there is a loop back equivalent to do what you want. I am not exactly sure what you mean by "restrict installation process". If you mean to install and deinstall software for a given user, you can do that via the User part of the policy. If you mean "Change some machine registry keys", you could write a script to do it, but remember you are running in the user context and so may not have access to change the key. Alan Cuthbertson Policy Management Software:- http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml ADM Template Editor:- http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml Policy Log Reporter(Free) http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml - Original Message - From: "Bruyere, Michel" <[EMAIL PROTECTED]> To: Sent: Wednesday, March 16, 2005 6:42 AM Subject: [ActiveDir] GPO loopback again... Hi, After testing things out with the loopback i still can't do something and i'm wondering if it posible to do it. With the loopback it's possible to make a user defined policy on a computer basis, but is it possible to make a computer defined policy on a user basis? What I wanna do is to restrict installation process and things like this but on a user basis to avoid having to move the computer account in and out of the UO. Thanks for your help! List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] GPO loopback again...
Hi, After testing things out with the loopback i still can't do something and i'm wondering if it posible to do it. With the loopback it's possible to make a user defined policy on a computer basis, but is it possible to make a computer defined policy on a user basis? What I wanna do is to restrict installation process and things like this but on a user basis to avoid having to move the computer account in and out of the UO. Thanks for your help! List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
