kam_uk
asked on
Denying a GPO to a certain group
Hi Guys
We are running Windows 2003 DC's.
Quick couple of questions on GPO's;
a) There is a setting to 'Enforce' GPO's - at the moment, this is set to NO, but I notice the GPO is still applied. What does Enforce actually mean?
b) Is there anyway to see the GPO result on the machine itself (as opposed to using the GPMT)
c) Let's say I have User A in Security Group A and Security Group B. There is a setting to hide the Control Panel that is applied to Sec Group A, but this setting is also Denied to Sec Group B. What is the net result for the user, assuming the setting is configured iwithin the same GPO?
d) Using Restricted Groups - let's say I use Restricted Groups to control who is member of the local Administrators group on a group of machines. Am I correct in thinking that if wanted to add someone to this group, I need to add their account to one of the Restricted groups or add the group to the Restricted Groups list? There is no other way around this?
Hope someone can help!
Cheers
We are running Windows 2003 DC's.
Quick couple of questions on GPO's;
a) There is a setting to 'Enforce' GPO's - at the moment, this is set to NO, but I notice the GPO is still applied. What does Enforce actually mean?
b) Is there anyway to see the GPO result on the machine itself (as opposed to using the GPMT)
c) Let's say I have User A in Security Group A and Security Group B. There is a setting to hide the Control Panel that is applied to Sec Group A, but this setting is also Denied to Sec Group B. What is the net result for the user, assuming the setting is configured iwithin the same GPO?
d) Using Restricted Groups - let's say I use Restricted Groups to control who is member of the local Administrators group on a group of machines. Am I correct in thinking that if wanted to add someone to this group, I need to add their account to one of the Restricted groups or add the group to the Restricted Groups list? There is no other way around this?
Hope someone can help!
Cheers
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
b) gpresult /v - its a plain text output. In XP you can use the Help center to get a HTML page
c) Deny should win