Pushing GPO's

[NetworkDOC]

Anyone know of a way to push GPO's to remote users? I made a gpo change and remote users cannot see the change. We are using MS clients and Cisco Vpn clients. When you connect via teh MS or Cisco Cient does this automatically force the GPO to them?

 

[WhoKilledKenny]

Are the remote computers company assests or the users personal PC? Not sure if GPOs would apply, definatly not computer policy since the remote PCs probably don't have computer accounts in the domain. What is it that you are trying to accomplish with the GPO?

 

[NetworkDOC]

The workstations are all company property.

I am trying to allow them to be able to add a printer without being a local administrator of their pc's. I altered the gpo and propagated it to the users at the site. The remote users cannot get it though.

 

[WhoKilledKenny]

Another thought is... if they are company assests, you may want to create Local Polices on your Desktop images so that the local policy would be applied when the user is not in the office. So if the assest is a laptop, when the computer is connected to the internal network the GPO on the domain will take precidence. Then when the user takes the laptop home to work, the local policy will be applied. I don't think you can (though I'm not 100% certain) apply a GPO over a remote connection and I don't think you would want to as you can not control what type of connection or bandwidth the user is using.

 

[WhoKilledKenny]

So, you are talking about loading a local printer when the user is at home? and therefore the user need to load drivers?
-or-
You want them to be able to install a network printer (from your domain) over the VPN connection?

Sorry for the annoying questions, I just want to make sure we are on the same page...

 

[WhoKilledKenny]

Also,
If you were able to make this change in the Domain GPO, then you can make the same change on the clients local policy (manually of course). gpedit.msc

 

[NetworkDOC]

Loading their local printer from home.

That sounds like a better plan (using a local policy) than what I intended. Have to think about how to accomplish that.

 

[NetworkDOC]

Ah and there you are. Can this be done remotely? Meaning can I remote into that pc and edit that? Say when they join up via the ms client?

 

[WhoKilledKenny]

I don't know... as I have not tested this personally. I'm just throwing out ideas as if I were asked to accomplish this task.