Computer Policy

[tester125]

Hi all,

I created a group "testgroup" at the Domain level to have restriction when anyone in said group logs in, the policy works fine. Now I create a container and added a few computers to that container, anyone who logs in to these computers should have full access, no restriction. Now how could I get the policy to not restrict the user that's in the "testgroup" when they log in to the few computers.

Thanks all.

 

[ReddLefty]

Edit the properties of your newly created OU and go to the Group Policy Tab.

You can enable the Block Policy Inheritance. This will prevent the Domain Policy from being applied to that specific OU. You can then create a new policy in the new OU with the things you want and they won't be overrided by the Domain Policy OU.



"In space, nobody can hear you click..."

 

[tester125]

Hi ReddLefty,

I need to check off Block Policy Inheritance at the OU level not at the Domain leve. Is this correct.

Thanks again

 

[ReddLefty]

You need to ADD the checkmark in the Block Policy Inheritance on the OU you do NOT want your Domain Policy to work on.



"In space, nobody can hear you click..."

 

[tester125]

Hi ReddLefty,

I did what you said. Modify the policy the way I want It, Add the Checkmark for Block Policy Inheritance and reboot the workstation in the OU. But When I login the workstation
still have the group restriction for the Domain level.
Any thoughts.

Thanks.

 

[tester125]

Just to Clarify,

At the Domain level I have a policy created and added group "test" that have full restrictions on computers in the domain. Policy works fine. I then created an OU and added about 20 laptops, but I want everyone in the group "test" to have full access without any restrictions when they logon. But when they "test" group logins they have restrictions that are set at the Domain level.
I tried what Reddlefty suggested, but it did not work. Could anyone else please shed some light. This is very urgent.
Thanks in advance.