Active Directory Sites

Hello,

What is the purpose of linking a GPO to a site? What computers, users does a site GPO apply to?
CiderspineAsked:
Who is Participating?
 
ajcaruso00Connect With a Mentor Commented:
Funny you should ask - I just encountered this last week and I like the idea of a site GPO.  The computers/users that the GPO applies to is relative to the subnets assigned to the site.  The usefulness deals with local settings for printer & drive mappings, WUS configuration, etc.  If you have multiple sites and services at each site, you can use the GPO for that site to customize things based on location.  For example, say a login script maps printers for a user, in NY that is fine, but when the user goes to LA, you want a different set of printers mapped - the site GPO can be used to accomplish this.

Hope that helps. -T
0
 
CiderspineAuthor Commented:
Thanks for you reply - certainly makes things clearer.
0
 
CiderspineAuthor Commented:
So a policy on NY site would apply to a computer that had an IP from the subnet assigned to the NY site? I assume you would have to ensure that the policy settings were not overridden by the same setting in an OU though?

Thanks.
0
Introducing Cloud Class® training courses

Tech changes fast. You can learn faster. That’s why we’re bringing professional training courses to Experts Exchange. With a subscription, you can access all the Cloud Class® courses to expand your education, prep for certifications, and get top-notch instructions.

 
CiderspineAuthor Commented:
Sorry - that wasn't very clear of me.

So a policy on NY site would apply to a computer that had an IP from the subnet assigned to the NY site? I assume you would have to ensure that a policy linked to a domain or OU did not contest the site policy for it to apply?
0
 
ajcaruso00Commented:
Exactly - and this is where I encountered the site GPO's this week; they were conflicting with local policies (to map printers to a new print server instead of the old one).  I didn't even know you could do this [I'm old-school and still wonder how a Group Policy can't be applied to a security group :-)  ]

Have a good one.  -T
0
 
CiderspineAuthor Commented:
Thanks.

FYI -  polices can be applied to security groups by removing Authenticated Users [apply policy] permission in the security settings of the policy, adding the respective security group and selecting the [apply policy] permission for that goup only. The object you want the policy to affect must of course be within the scope of the policy.

:)
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.