Link to home
Create AccountLog in
Avatar of mcjim2k
mcjim2kFlag for United States of America

asked on

In Group Policy Object Editor, are User Configuration settings only applied to User Objects?

This maybe a dumb question, but I want to hear it from an expert:
In Group Policy Object Editor, are User Configuration settings only applied to User Objects?

Say i create a Group Policy with only Computer Objects below the policy. If i modify anything in the User Configuration, will those settings take affect on users who log onto one of those computers that are under the Group Policy?

For example, say I've configured Folder Redirection on My Documents in a policy. Only computer objects are below that policy. When a user logs on, will their My Documents folder be redirected?

Thanks.
Avatar of jkarnes12
jkarnes12
Flag of United States of America image

It only applies to User objects.  You would have to apply the GPO to either an OU with Users, or a Specific Group with users.
Avatar of Andrew P
In a GPO there are two sets of Objects.  User and Computer.

You are correct with your asumptions.  The computer setting will apply to the computer and the user setting will apply to the user, but only when logged on to the computer which has the GPO applied

Yes there My Documents will be redirected.

Greenclock
You're exactly correct. However, you can configure a loopback policy against a computer object, which means policies set in User Configuration but for Computer objects will still be applied. See http://support.microsoft.com/kb/231287.
Avatar of mcjim2k

ASKER

Tigermatt,

In response to the article you mentioned, when using that Loop Back feature:
Say the user object is in an  OU with a Group Policy that has Folder Redirection configured.

Then there is a computer object in another OU with a Group Policy that doesn't have Folder Redirection configured because computers in that OU are laptops, and this Group Policy has loopback processing mode is enabled and set to Replace Mode.

Will the Laptop Computer Policy override the User Policy so that Folder Redirection is not enabled when a user logs onto that laptop?

Thanks.
ASKER CERTIFIED SOLUTION
Avatar of Member_2_4466560
Member_2_4466560

Link to home
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
See answer
Depends on the order in which the GPO are applied.

Have you installed the GPMC tool from Microsoft.
   http://www.microsoft.com/downloads/details.aspx?FamilyId=0A6D4C24-8CBD-4B35-9272-DD3CBFC81887&displaylang=en
KrazyRhino

Good Quote.  
SOLUTION
Link to home
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
Avatar of mcjim2k

ASKER

Thanks guys. The points were split between KrazyRhino and Tigermatt because KrazyRhino answered in detail about the GPO hierarchy while Tigermatt answered a question regarding Folder Redirection on laptops that I felt was important to have an answer to.

Thanks a lot.