how to set up a group policy attached to a group or single user

I am trying to figure out how I can attach a group policy to either a user or a group of users within a OU. Specifically, I am setting up remote access using terminal server. I want to create the group policy in the same container as where the users are currently located. domainname.ca.local/local users
Normally, I would create another OU right under local users and call it ts users...
domainname.ca.local/local users/ts users
...but I believe there is a way to do it so that I can use the same OU where the users are located and just add them to a group to take on the group policy. I am running Windows 2003 Standard
Thanks in advance for the help
johnbowdenAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

LauraEHunterMVPCommented:
You're thinking of security group filtering, wherein you modify the Permissions of a GPO. By default, every GPO has a security entry for "Authenticated Users" of "Allow - Read, Apply Group Policy".  You can either:

[1] Remove the entry for Authenticated users and create an "Allow - Read, Apply Group Policy" entry for only those users who should receive the policy, or

[2] Leave the Authenticated Users entry in place and create a "DENY - Read, Apply Group Policy" entry to exclude a specific subset of users who should NOT receive the policy.

Here's a good tutorial from Mitch Tulloch on how to set this up in the GP Management Console: http://www.windowsnetworking.com/articles_tutorials/Group-Policy-Security-Filtering.html

Hope this helps.

Laura E. Hunter - Microsoft MVP: Windows Server - Networking
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
johnbowdenAuthor Commented:
that's exactly what I'm looking for. Thanks!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Server OS

From novice to tech pro — start learning today.