Solved

Preventing GPO/login scripts when logging into a trusting forest 2003

Posted on 2006-10-21
5
322 Views
Last Modified: 2010-04-18
I have 2 forest with a 1-way forest trust. I will call them forest A and B.

A trust B

When an individual logs into A, with B credentials there is a 5 min. lag in their logon. Event logs say "GPO aborted....etc"

How can I block the application of policies from B to A?


0
Comment
Question by:doximagen
  • 3
  • 2
5 Comments
 
LVL 48

Expert Comment

by:Jay_Jay70
Comment Utility
you will have to block both.....the fact is, user B has logon scripts and GPO's applied....you log on with him then you will get them......i don't know of a way in this scenario to do what you are asking but will watch in case someone else has ideas
0
 

Author Comment

by:doximagen
Comment Utility
Isn't there a way to block those GPO's from running accross different forests?
0
 
LVL 48

Expert Comment

by:Jay_Jay70
Comment Utility
you are calling an account from another forest, if you were able to block the GPO's then you may as well through your security off the top floor
0
 

Author Comment

by:doximagen
Comment Utility
Just to be clear...

I have an account in Forest B...
Forest A Trusts B
I login to Forest A with my Forest B credentials.
I am logging on to a workstation/server that is in Forest A as well.

How exactly do I prevent the GPO's from running when I am logging into the Forest A Server/workstation?
0
 
LVL 48

Accepted Solution

by:
Jay_Jay70 earned 250 total points
Comment Utility
The GPO's are user based NOT computer based then and as i said, i know of no way to make this any different
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

I have never ceased to be amazed how many problems you can encounter on a fresh install of a Windows operating system.  This is certainly case in point& Unable to complete ANY MSI installation.  This means Windows Updates are failing and I can't …
I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now