Learn how to a build a cloud-first strategyRegister Now

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 987
  • Last Modified:

Configuring a new Windows Server 2003 Group Policy Object

(I've tried to do my homework but I'm still stuck.  I've downloaded and printed "Create a new Group Policy Object" and "Redirect My Documents to the home directory").
I need to implement Fiolder Redirection, so that all my domain users have their My Documents located on the central server.
I have a teacher, Teacher1, belonging to a group called Teachers.   (Right?)
I think the next step is to create a new Group Policy object associated with the Teachers group, which simply a)  Assigns Teacher1's Home Directory to a shared folder on Server1, and b) Redirects Teacher1's My Documents to a Documents folder in Teacher1's Home Directory.
BUT when I right-click on the Teachers group that I see beneath the domain name, I don't see an option to create a new Group Policy Object.  
Thanks in advance for your help!
Dwight Baer
Dwight Baer
  • 4
  • 3
1 Solution
Toni UranjekConsultant/TrainerCommented:

Group policy has almost nothing to do with groups. What you need to do is:
1. Create new OU.
2. Move user accounts of teachers to this OU.
3. Right click OU, select Properties, go to Group Policy and create new GPO. If you have GPMC installed, you can do this in GPMC (download here: http://www.microsoft.com/downloads/details.aspx?familyid=0a6d4c24-8cbd-4b35-9272-dd3cbfc81887)
4. Configure Policy settings.
5. On client computer go to command prompmpt and run "gpupdate /force" or reboot computer.


Dwight BaerAuthor Commented:
OK ...
I have a question about Step #2, "Move user account of Teachrs to this OU".
- I have deleted my group, "Teachers", and created a new Organizational Unit called "Teachers"
- But when I right-click on the OU "Teachers", and click "Move", I get the window "Move object into container".  When I click on Users, and then choose Teacher1, I get the following error:
"Windows cannot move object Teachers because:
The object cannot be added because the parent is not on the list of possible superiors."
What am I doing wrong?

Dwight BaerAuthor Commented:
Maybe I know the answer.  
- I have to delete Teacher1 from the Users folder where it was.  
- Then I have to right-click on my Teachers OU, then click New --> User
Then my teacher will belong to that OU.
Restore individual SQL databases with ease

Veeam Explorer for Microsoft SQL Server delivers an easy-to-use, wizard-driven interface for restoring your databases from a backup. No expert SQL background required. Web interface provides a complete view of all available SQL databases to simplify the recovery of lost database

Toni UranjekConsultant/TrainerCommented:
No need to delete user accounts, just right click them and select Move and then select Teachers OU. You can also drag & drop user accounts from one container to the other.
Dwight BaerAuthor Commented:
Wow.  Don't know why I couldn't figure that out.
- Followup Question #1.  Now that Teacher1 is a member of the Teachers OU, when I go to Teacher1's "Properties --> Member Of", why don't I see Teacher1 as a member of the Teachers OU?  All that he's currently a member of is "Domain Users".
- Followup Question #2.  Why might I want Teacher1 to be a member of the Teachers OU as well as (for example) the TeachersGroup Security Group?  Sorry ... I'm just learning the basics of this.  I have read about it, but can't find this answer.
Toni UranjekConsultant/TrainerCommented:
You always use OUs to assign GPOs to users or computers. You use groups mainly to assign permissions. User cam be a member of exactly one OU at the same time. User can be a member of many groups and it's not important where in AD (in which OU) these groups reside.
Dwight BaerAuthor Commented:
Thank you very much, toniur.  It worked.  But with Windows Vista there's a wrinkle.  Even if "My Documents" is redirected in Windows Vista, there is also "Documents".  But I think I'll start a new question, since that's a Vista question.

Featured Post

Veeam Disaster Recovery in Microsoft Azure

Veeam PN for Microsoft Azure is a FREE solution designed to simplify and automate the setup of a DR site in Microsoft Azure using lightweight software-defined networking. It reduces the complexity of VPN deployments and is designed for businesses of ALL sizes.

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now