Link to home
Start Free TrialLog in
Avatar of Dwight Baer
Dwight BaerFlag for Canada

asked on

Configuring a new Windows Server 2003 Group Policy Object

(I've tried to do my homework but I'm still stuck.  I've downloaded and printed "Create a new Group Policy Object" and "Redirect My Documents to the home directory").
I need to implement Fiolder Redirection, so that all my domain users have their My Documents located on the central server.
I have a teacher, Teacher1, belonging to a group called Teachers.   (Right?)
I think the next step is to create a new Group Policy object associated with the Teachers group, which simply a)  Assigns Teacher1's Home Directory to a shared folder on Server1, and b) Redirects Teacher1's My Documents to a Documents folder in Teacher1's Home Directory.
BUT when I right-click on the Teachers group that I see beneath the domain name, I don't see an option to create a new Group Policy Object.  
Thanks in advance for your help!
ASKER CERTIFIED SOLUTION
Avatar of Toni Uranjek
Toni Uranjek
Flag of Slovenia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Dwight Baer

ASKER

OK ...
I have a question about Step #2, "Move user account of Teachrs to this OU".
- I have deleted my group, "Teachers", and created a new Organizational Unit called "Teachers"
- But when I right-click on the OU "Teachers", and click "Move", I get the window "Move object into container".  When I click on Users, and then choose Teacher1, I get the following error:
"Windows cannot move object Teachers because:
The object cannot be added because the parent is not on the list of possible superiors."
What am I doing wrong?

Maybe I know the answer.  
- I have to delete Teacher1 from the Users folder where it was.  
- Then I have to right-click on my Teachers OU, then click New --> User
Then my teacher will belong to that OU.
No need to delete user accounts, just right click them and select Move and then select Teachers OU. You can also drag & drop user accounts from one container to the other.
Wow.  Don't know why I couldn't figure that out.
- Followup Question #1.  Now that Teacher1 is a member of the Teachers OU, when I go to Teacher1's "Properties --> Member Of", why don't I see Teacher1 as a member of the Teachers OU?  All that he's currently a member of is "Domain Users".
- Followup Question #2.  Why might I want Teacher1 to be a member of the Teachers OU as well as (for example) the TeachersGroup Security Group?  Sorry ... I'm just learning the basics of this.  I have read about it, but can't find this answer.
You always use OUs to assign GPOs to users or computers. You use groups mainly to assign permissions. User cam be a member of exactly one OU at the same time. User can be a member of many groups and it's not important where in AD (in which OU) these groups reside.
Thank you very much, toniur.  It worked.  But with Windows Vista there's a wrinkle.  Even if "My Documents" is redirected in Windows Vista, there is also "Documents".  But I think I'll start a new question, since that's a Vista question.