Re: Diffrent way to apply Group Policy

Home Forums Microsoft Networking and Management Services GPO Diffrent way to apply Group Policy Re: Diffrent way to apply Group Policy


Rems
Moderator
#226459

Re: Diffrent way to apply Group Policy

Your GPO is linked to the OU containing the users (because you want to apply a typical user configuration)
But the GPO must only apply to the users when they logged on to a particular computer.
Therefore view the properties of the linked GPO, goto tab “Scope”
There you have two ways of filtering;

– Using the “Security Filter” you have the option to include only particular users or groups containing users (since this GPO is about the user configuration).

– And, you can use the “WMI filter” to set a condition based on attributes of the target computer: http://technet2.microsoft.com/windowsserver/en/library/6237b9b2-4a21-425e-8976-2065d28b31471033.mspx?mfr=true .

examples of WMI-filters:

Apply the GPO to the users only when they logon to one of these 3 servers
RootCimV2;
Select * From Win32_OperatingSystem Where CSName = “ServerNameA” OR CSName = “ServerNameB” OR CSName = “ServerNameC”

Or, apply the GPO always to the users except when they logon to one of these 3 servers
RootCimV2;
Select * From Win32_OperatingSystem Where CSName “ServerNameA” AND CSName “ServerNameB” AND CSName “ServerNameC”

If you have to many servers to list in the filter above, then try to find an other way to identify the servers. (Maybe you can add a new keyvalue in the registry of these servers and update the WMI Repository with it? so you can filter that value with a WMI-filter: http://grouppolicy.editme.com/WMIFilters)

Rems

Edit –
Or, of course,
maybe it is not realy nessesary to use a special GPO for this? In that case – you can apply the user configuration by logonscript. that modifies the registry current_user key. A script is also able to check al kind of properties on the computer, what you can use as condition to run parts of the script or not.