Ken
From: tony patton [mailto:tony.pat...@quinn-insurance.com]
Sent: Thursday, 6 August 2009 6:40 PM
To: NT System Admin Issues
Subject: RE: GPO for a single user
That's what we do, but different conventions over the years as things increase
just gets messy.
We have policies for different
in a manner that would be relatively easy to locate things
in.
Cheers
Ken
*From:* tony patton [mailto:tony.pat...@quinn-insurance.com]
*Sent:* Thursday, 6 August 2009 6:40 PM
*To:* NT System Admin Issues
*Subject:* RE: GPO for a single user
That's what we do, but different conventions
+ 1
Good descriptions will go a long way too +1 bazillion! I use the description
field and as much of it as possible.
From: James Rankin [mailto:kz2...@googlemail.com]
Sent: Friday, August 07, 2009 2:22 AM
To: NT System Admin Issues
Subject: Re: GPO for a single user
+1 on the one GPO, one
Scott mailvor...@gmail.com
05/08/2009 18:14
Please respond to
NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
To
NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
cc
Subject
Re: GPO for a single user
On Wed, Aug 5, 2009 at 1:02 AM, Ken Schaeferk...@adopenstatic.com
: GPO for a single user
I'd just be happy with a way to organise GPOs and WMI Filters, instead of a big
flat messy list of both.
It would be nice to have them grouped in some logical fashion.
Regards
Tony Patton
Desktop Operations Cavan
Ext 8078
Direct Dial 049 435 2878
email: tony.pat...@quinn
RE: GPO for a single user
Most people use a naming convention to have the list sorted, and this
tends to ?group? the GPOs.
What sorts of things are you imagining for grouping?
Cheers
Ken
From: tony patton [mailto:tony.pat...@quinn-insurance.com]
Sent: Thursday, 6 August 2009 4:02 PM
On Wed, Aug 5, 2009 at 1:02 AM, Ken Schaeferk...@adopenstatic.com wrote:
Sorry, but I'm failing to see why this particular feature request
is one that should go in, but inevitable requests for additional
extensions to the functionality should not :-)
Because I said so, of course. ;-)
To
Greedy greedy. You want everything, and from Microsoft.
This has been possible within Zenworks for years and I've used it as such. Now
that I'm moving to AD I'm adjusting to the methods other folks in the thread
suggested.
Of course you could go out and get Zenworks, but that would be
To: NT System Admin Issues
Subject: GPO for a single user
Hey list,
To the best of my knowledge, there is no way to create a GPO for a
particular user account. You can, of course, create a GPO linked to
the OU containing that user account, and then set permissions on the
GPO
Hey, Ben
I thought about this for a while, and although I initially thought it would
be useful, it seems like it would make it harder to find GPOs that are being
applied without running RSOP all the time.
Either way, it probably couldn't hurt to ask for it... I'm kind of partial
to GPO
to handle version control, delegation
and promotion of GPOs between environments).
Cheers
Ken
-Original Message-
From: Ben Scott [mailto:mailvor...@gmail.com]
Sent: Tuesday, 4 August 2009 2:54 PM
To: NT System Admin Issues
Subject: Re: GPO for a single user
On Mon, Aug 3, 2009 at 11:52
Hey list,
To the best of my knowledge, there is no way to create a GPO for a
particular user account. You can, of course, create a GPO linked to
the OU containing that user account, and then set permissions on the
GPO such that only that user has the Apply Group Policy permission
for that GPO.
: Ben Scott [mailto:mailvor...@gmail.com]
Sent: Monday, August 03, 2009 4:27 PM
To: NT System Admin Issues
Subject: GPO for a single user
Hey list,
To the best of my knowledge, there is no way to create a GPO for a particular
user account. You can, of course, create a GPO linked to the OU
You can do a GPO for a user or group. Remove authenticated users and add the
user or group instead to associations within an OU.
Ben Scott mailvor...@gmail.com 8/3/2009 5:26 PM
Hey list,
To the best of my knowledge, there is no way to create a GPO for a
particular user account. You can,
He wants to do a GP to a person at an account level, not in the OU that
they reside.
Its not possible.
Gavin Wilby.
MCSE. MCTS. MCITP. ACSP.
MSN: gavst...@hotmail.com
Twitter: http://twitter.com/gavin_wilby
Blog: http://www.stoof.co.uk
Tom Miller wrote:
You can do a GPO for a user
This can be done already.
-Original Message-
From: Brian Desmond [mailto:br...@briandesmond.com]
Sent: Monday, August 03, 2009 5:01 PM
To: NT System Admin Issues
Subject: RE: GPO for a single user
PSS and your account team can both assist in filing a DCR on your
behalf...
Thanks
On Mon, Aug 3, 2009 at 6:22 PM, Sam Cayzesam.ca...@rollouts.com wrote:
This can be done already.
How?
-- Ben
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
On Mon, Aug 3, 2009 at 6:01 PM, Brian Desmondbr...@briandesmond.com wrote:
PSS and your account team can both assist in filing a DCR on your behalf...
What's a DCR? :) something Change Request?
Will PSS talk to me without a credit card number? I don't want to
pay $50 or $250 just to
On Mon, Aug 3, 2009 at 6:16 PM, Tom Millertmil...@hnncsb.org wrote:
You can do a GPO for a user or group. Remove authenticated users and add
the user or group instead to associations within an OU.
Read the second sentence of my post. :-)
-- Ben
~ Finally, powerful endpoint security that
To: NT System Admin Issues
Subject: Re: GPO for a single user
On Mon, Aug 3, 2009 at 6:01 PM, Brian Desmondbr...@briandesmond.com wrote:
PSS and your account team can both assist in filing a DCR on your behalf...
What's a DCR? :) something Change Request?
Will PSS talk to me without a credit
On Mon, Aug 3, 2009 at 6:46 PM, Brian Desmondbr...@briandesmond.com wrote:
Design Change Request.
Ah. Thanks for the tip. :)
And no you'd need to pay. I don't know if they'd even let you do it on a pro
case - no clue.
Okay, thanks anyway.
-- Ben
~ Finally, powerful endpoint security
On Mon, Aug 3, 2009 at 15:42, Ben Scottmailvor...@gmail.com wrote:
On Mon, Aug 3, 2009 at 6:16 PM, Tom Millertmil...@hnncsb.org wrote:
You can do a GPO for a user or group. Remove authenticated users and add
the user or group instead to associations within an OU.
Read the second sentence of
Since I'm apparently not explaining this very well, let me emphasize:
*** I ALREADY KNOW HOW TO DO THIS WITH GPO PERMISSIONS. ***
:-)
I am/was trying to explain a concept for a better way.
On Mon, Aug 3, 2009 at 7:16 PM, Kurt Buffkurt.b...@gmail.com wrote:
I put all of my service
As far as I know it's still LSDOU unless something's changed in 2008
which I don't know about. Filtering and ACEs have already been
discussed.
On a theoretical level, how could Ben's request work? If Group Policy
is AD-based, then you're stuck with the SDOU part unless I'm missing
something.
On Mon, Aug 3, 2009 at 8:24 PM, Richard Stovall rich...@gmail.com wrote:
On a theoretical level, how could Ben's request work? If Group Policy
is AD-based, then you're stuck with the SDOU part unless I'm missing
something.
Well, for domain-based user accounts, one could posit an attribute
Oh, that's just *way* too logical.
MSFT will catch up with that in about 10 years, I'm guessing.
On Mon, Aug 3, 2009 at 16:45, Ben Scottmailvor...@gmail.com wrote:
Since I'm apparently not explaining this very well, let me emphasize:
*** I ALREADY KNOW HOW TO DO THIS WITH GPO PERMISSIONS.
...@elyriaschools.org]
Sent: Tuesday, 4 August 2009 11:23 AM
To: NT System Admin Issues
Subject: RE: GPO for a single user
It would be cleaner and easier to do if every user object could just
have a GPO associated with it directly. This would be analogous to
how every machine has a GPO of its own
On Mon, Aug 3, 2009 at 11:52 PM, Ken Schaeferk...@adopenstatic.com wrote:
Whilst the particular case might be simple ... I can just see this
getting out of hand.
So don't do that, then. :) Microsoft tells people no all the
time. That can be one more of those.
People will want to be able
28 matches
Mail list logo
