|
Best Way to Block user or computer from receiving GP
Is it better to have users grouped together in a single Departmental Ou and
then use deny security to block a GP for a subset of users or is it better to
put the subset of users in sub ou?
Example
Domain
Sales
Reps
- Group Policy 1
Team Leads
- Group Policy 2
OR
Domain
Sales
- Group Policy 1 (deny Team Leads)
- Group Policy 2 (d...
|
3 |
4/14/2007 6:10:26 AM |
|
|
Group Policy Best Practie - Many vs Few?
Is it better to have many single action group policies or to use as few Group
Policies as possible with a many action GP.
For Example I am currently in the process of deploying printers via GP. I
have a Desktop OU and a User OU both with many departmental sub OUs. I have
created a domain wide GP with the single action of adding
pushprinterconnections.exe to the computer startup script u...
|
3 |
4/14/2007 6:00:43 AM |
|
|
sbs 2003 sp 1
Somehow our "domain controller security policy" and "domain security policy"
under the administrative tools were disabled. Dont when that happened until
yesterday I tried to open it.
The error is as follow:
Failed to open Group Policy Object. You may not have appropriate rights.
Details
The system cannot find the path specified
It had close button. When I clicked on closed the def...
|
1 |
4/13/2007 7:42:02 PM |