• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 280
  • Last Modified:

Active Directory Sites

Hello,

What is the purpose of linking a GPO to a site? What computers, users does a site GPO apply to?
0
Ciderspine
Asked:
Ciderspine
  • 4
  • 2
1 Solution
 
ajcaruso00Commented:
Funny you should ask - I just encountered this last week and I like the idea of a site GPO.  The computers/users that the GPO applies to is relative to the subnets assigned to the site.  The usefulness deals with local settings for printer & drive mappings, WUS configuration, etc.  If you have multiple sites and services at each site, you can use the GPO for that site to customize things based on location.  For example, say a login script maps printers for a user, in NY that is fine, but when the user goes to LA, you want a different set of printers mapped - the site GPO can be used to accomplish this.

Hope that helps. -T
0
 
CiderspineAuthor Commented:
Thanks for you reply - certainly makes things clearer.
0
 
CiderspineAuthor Commented:
So a policy on NY site would apply to a computer that had an IP from the subnet assigned to the NY site? I assume you would have to ensure that the policy settings were not overridden by the same setting in an OU though?

Thanks.
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
CiderspineAuthor Commented:
Sorry - that wasn't very clear of me.

So a policy on NY site would apply to a computer that had an IP from the subnet assigned to the NY site? I assume you would have to ensure that a policy linked to a domain or OU did not contest the site policy for it to apply?
0
 
ajcaruso00Commented:
Exactly - and this is where I encountered the site GPO's this week; they were conflicting with local policies (to map printers to a new print server instead of the old one).  I didn't even know you could do this [I'm old-school and still wonder how a Group Policy can't be applied to a security group :-)  ]

Have a good one.  -T
0
 
CiderspineAuthor Commented:
Thanks.

FYI -  polices can be applied to security groups by removing Authenticated Users [apply policy] permission in the security settings of the policy, adding the respective security group and selecting the [apply policy] permission for that goup only. The object you want the policy to affect must of course be within the scope of the policy.

:)
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now