No announcement yet.

Group Policy question

  • Filter
  • Time
  • Show
Clear All
new posts

  • Group Policy question

    Hello, I want to set a group policy to a standard user we have at our school (Student) which most students use, but I don't want one GPO to affect other containers with this same user. Is this possible?

    I'll try and explain a bit more...

    I have GPO's set for this user (student) and have certain policies set for one container (classroom A), but now I have to set a policy for this same user for another classroom (classroom B), but I don't want this policy to affect this user while logged on in classroom A.

    Active Directory Domain
    .(Container - Classroom A) (GPO -1)
    -----------Student (user object) IE homepage set to
    .(Container - Classroom B) (GPO -2)
    ----------- IE homepage set to (How do I point this GPO -2) to this same user to receive a different set of policies?

    Is this possible?

    I read something about loopback but not sure how to go about setting it up.

    Any help is much appreciated.
    Last edited by beatrixkiddo; 29th August 2016, 23:31.

  • #2
    Computers in the OUs (not containers, which are at the domain level) and loopback processing should do it
    is your friend for the details but roughly:
    Computer gets its policy at startup
    User gets policy at logon (so over-rides computer settings)
    Loopback either replaces user settings or merges computer with user settings, but computer settings beat user
    Tom Jones
    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
    IT Trainer / Consultant
    Ossian Ltd

    ** Remember to give credit where credit is due and leave reputation points where appropriate **