Link to home
Start Free TrialLog in
Avatar of Ben Hart
Ben HartFlag for United States of America

asked on

Easy way to block GPO's from a specific OU (such a "Terminal Servers"?

Background info:  I've created OU's for each department within my company and populated with all cooresponding users.  I created a GPO linked to Finance with the only modifier being a login script to map three printers.  

Problem:  I need to stop this script from being processed if a Finance user logs into our Terminal Server environment.

Should I block inheritance? I read a microsoft KB on enabling loopback but it was very unclear as to which GPO you would do that on.. Like on the one you want blocked or what?

Thanks!
SOLUTION
Avatar of CptnTrips
CptnTrips

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Avatar of Brian Pierce
Brian Pierce
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Ben Hart

ASKER

Yeah KCTS, that is the same MSFT KB i mentioned above.. maybe its the wording they used throwing me off, but those instructions mention creating a "TS" OU, moving the servers into that new OU, then creating a GPO within that OU.  Why would I need what looks like a blank GPO?

And thier Method 2.. Is all that really saying to create a blank GPO within the Terminal Server OU and enable Loopback on it?... thats it?
The idea is that the computer settings (in the GPO applied to the TS OU), are re-applied, and thereby overwrite the user settings. Normally User settings would take presidence.
I think I see now.. so i was at least partially right.  If I do not currently have a Terminal Server specific GPO, then I would indeed create a blank one so that it would overwrite any others that find their way in.  
Should it be set to Merge or Replace?