RE: GPO for a single user

+ 1 "Good descriptions will go a long way too" +1 bazillion! I use the description field and as much of it as possible. From: James Rankin [mailto:kz2...@googlemail.com] Sent: Friday, August 07, 2009 2:22 AM To: NT System Admin Issues Subject: Re: GPO for a single user +1 on the &qu

Re: GPO for a single user

ngs-Computer-WSUS-SiteCode1-L2 > > Admin Settings-Computer-WSUS-SiteCode1-L3 > > Admin Settings-Computer-WSUS-SiteCode2-L1 > > > > Would sort those in a manner that would be relatively easy to locate things > in. > > > > Cheers > > Ken > > >

RE: GPO for a single user

ngs in. Cheers Ken From: tony patton [mailto:tony.pat...@quinn-insurance.com] Sent: Thursday, 6 August 2009 6:40 PM To: NT System Admin Issues Subject: RE: GPO for a single user That's what we do, but different conventions over the years as things increase just gets messy. We have po

RE: GPO for a single user

100% sure. Regards Tony Patton Desktop Operations Cavan Ext 8078 Direct Dial 049 435 2878 email: tony.pat...@quinn-insurance.com Ken Schaefer 06/08/2009 10:16 Please respond to "NT System Admin Issues" To "NT System Admin Issues" cc Subject RE: GPO for a single user

RE: GPO for a single user

es Subject: Re: GPO for a single user I'd just be happy with a way to organise GPOs and WMI Filters, instead of a big flat messy list of both. It would be nice to have them grouped in some logical fashion. Regards Tony Patton Desktop Operations Cavan Ext 8078 Direct Dial 049 435 2878

Re: GPO for a single user

Ben Scott 05/08/2009 18:14 Please respond to "NT System Admin Issues" To "NT System Admin Issues" cc Subject Re: GPO for a single user On Wed, Aug 5, 2009 at 1:02 AM, Ken Schaefer wrote: > Sorry, but I'm failing to see why this particular feature reques

Re: GPO for a single user

On Wed, Aug 5, 2009 at 1:02 AM, Ken Schaefer wrote: > Sorry, but I'm failing to see why this particular feature request > is one that should go in, but inevitable requests for additional > extensions to the functionality should not :-) Because I said so, of course. ;-) To me, it's a combinat

RE: GPO for a single user

front-end to handle version control, delegation and promotion of GPOs between environments). Cheers Ken -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Tuesday, 4 August 2009 2:54 PM To: NT System Admin Issues Subject: Re: GPO for a single user On Mon, Aug 3, 200

Re: GPO for a single user

Hey, Ben I thought about this for a while, and although I initially thought it would be useful, it seems like it would make it harder to find GPOs that are being applied without running RSOP all the time. Either way, it probably couldn't hurt to ask for it... I'm kind of partial to GPO Permissi

RE: GPO for a single user

We do some special case login scripts with reg entries for individual users (which is all a GPO tends to do anyway), but it's not the cleanest. Your suggestion is a good one. -sc > -Original Message- > From: Ben Scott [mailto:mailvor...@gmail.com] > Sent: Monday, August 03, 2009 5:27 PM

Re: GPO for a single user

Greedy greedy. You want everything, and from Microsoft. This has been possible within Zenworks for years and I've used it as such. Now that I'm moving to AD I'm adjusting to the methods other folks in the thread suggested. Of course you could go out and get Zenworks, but that would be

Re: GPO for a single user

On Mon, Aug 3, 2009 at 11:52 PM, Ken Schaefer wrote: > Whilst the particular case might be simple ... I can just see this > getting out of hand. So don't do that, then. :) Microsoft tells people "no" all the time. That can be one more of those. > People will want to be able to do this to gro

RE: GPO for a single user

: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Tuesday, 4 August 2009 11:23 AM To: NT System Admin Issues Subject: RE: GPO for a single user > It would be cleaner and easier to do if every user object could just > have a GPO associated with it directly. This would be analogous to >

RE: GPO for a single user

> It would be cleaner and easier to do if every user object could just > have a GPO associated with it directly. This would be analogous to > how every machine has a GPO of its own. Suppose a button in the user > properties dialog to edit the GPO for that user. > > -- Ben Yep. A simple place i

Re: GPO for a single user

Oh, that's just *way* too logical. MSFT will catch up with that in about 10 years, I'm guessing. On Mon, Aug 3, 2009 at 16:45, Ben Scott wrote: >  Since I'm apparently not explaining this very well, let me emphasize: > > *** I ALREADY KNOW HOW TO DO THIS WITH GPO PERMISSIONS. *** > >  :-) > >  I

Re: GPO for a single user

On Mon, Aug 3, 2009 at 8:24 PM, Richard Stovall wrote: > On a theoretical level, how could Ben's request work?  If Group Policy > is AD-based, then you're stuck with the SDOU part unless I'm missing > something. Well, for domain-based user accounts, one could posit an attribute for user objects

Re: GPO for a single user

As far as I know it's still LSDOU unless something's changed in 2008 which I don't know about. Filtering and ACEs have already been discussed. On a theoretical level, how could Ben's request work? If Group Policy is AD-based, then you're stuck with the SDOU part unless I'm missing something. Ri

Re: GPO for a single user

Since I'm apparently not explaining this very well, let me emphasize: *** I ALREADY KNOW HOW TO DO THIS WITH GPO PERMISSIONS. *** :-) I am/was trying to explain a concept for a better way. On Mon, Aug 3, 2009 at 7:16 PM, Kurt Buff wrote: > I put all of my service accounts in a separate OU

Re: GPO for a single user

On Mon, Aug 3, 2009 at 15:42, Ben Scott wrote: > On Mon, Aug 3, 2009 at 6:16 PM, Tom Miller wrote: >> You can do a GPO for a user or group.  Remove "authenticated users" and add >> the user or group instead to associations within an OU. > >  Read the second sentence of my post.  :-) > > -- Ben I p

Re: GPO for a single user

On Mon, Aug 3, 2009 at 6:46 PM, Brian Desmond wrote: > Design Change Request. Ah. Thanks for the tip. :) > And no you'd need to pay. I don't know if they'd even let you do it on a pro > case - no clue. Okay, thanks anyway. -- Ben ~ Finally, powerful endpoint security that ISN'T a resour

RE: GPO for a single user

2009 5:42 PM To: NT System Admin Issues Subject: Re: GPO for a single user On Mon, Aug 3, 2009 at 6:01 PM, Brian Desmond wrote: > PSS and your account team can both assist in filing a DCR on your behalf... What's a "DCR"? :) " Change Request"? Will PSS talk to me

Re: GPO for a single user

On Mon, Aug 3, 2009 at 6:16 PM, Tom Miller wrote: > You can do a GPO for a user or group.  Remove "authenticated users" and add > the user or group instead to associations within an OU. Read the second sentence of my post. :-) -- Ben ~ Finally, powerful endpoint security that ISN'T a resource

Re: GPO for a single user

On Mon, Aug 3, 2009 at 6:01 PM, Brian Desmond wrote: > PSS and your account team can both assist in filing a DCR on your behalf... What's a "DCR"? :) " Change Request"? Will PSS talk to me without a credit card number? I don't want to pay $50 or $250 just to submit a suggestion. I don't

Re: GPO for a single user

On Mon, Aug 3, 2009 at 6:22 PM, Sam Cayze wrote: > This can be done already. How? -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ ~

RE: GPO for a single user

This can be done already. -Original Message- From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Monday, August 03, 2009 5:01 PM To: NT System Admin Issues Subject: RE: GPO for a single user PSS and your account team can both assist in filing a DCR on your behalf... Thanks

Re: GPO for a single user

He wants to do a GP to a person at an account level, not in the OU that they reside. Its not possible. Gavin Wilby. MCSE. MCTS. MCITP. ACSP. MSN: gavst...@hotmail.com Twitter: http://twitter.com/gavin_wilby Blog: http://www.stoof.co.uk Tom Miller wrote: You can do a GPO for a user or

Re: GPO for a single user

You can do a GPO for a user or group. Remove "authenticated users" and add the user or group instead to associations within an OU. >>> Ben Scott 8/3/2009 5:26 PM >>> Hey list, To the best of my knowledge, there is no way to create a GPO for a particular user account. You can, of course, cre

RE: GPO for a single user

PSS and your account team can both assist in filing a DCR on your behalf... Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 Active Directory, 4th Ed - http://www.briandesmond.com/ad4/ Microsoft MVP - https://mvp.support.microsoft.com/profile/Brian -Original Message- From: