Solved

Windows 2008 Group Policy

Posted on 2011-09-08
8
262 Views
Last Modified: 2012-05-12
I have a GPO setup that is adding proxy settings to point to a WPAD file for my organization.  I have this GPO being applied to the domain computers and authenticated users groups.  I want to test out a new WPAD file for a few users.  How should I setup the GPO for the new WPAD so that it only applies to a few users and not the entire organization?
0
Comment
Question by:PSGITech
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 35

Expert Comment

by:Joseph Daly
ID: 36504259
I would create a new OU, block policy inheritance on that OU, then create and apply your new testing group policy on that one. This way you can ensure that only your GPO is being applied and nothing else.

You can then move the test users into this new OU and they should get the settings applied.
0
 
LVL 2

Author Comment

by:PSGITech
ID: 36504287
xxdcmast that is a good idea, the problem is I have a few other GPO's that need to be applied as per company policy and blocking inheritance will prevent them from being applied, do you have any other ideas?
0
 
LVL 11

Expert Comment

by:madhatter5501
ID: 36504304
create a test user put into that ou?
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 8

Accepted Solution

by:
jfletchster earned 500 total points
ID: 36504309
You could create a custom ou to put the users in on a temp basis with the other OU's if you made it a sub folder of their existing ou and set your new GPO to that ou and enforce the policy it will over-ride all above GPO settings
0
 
LVL 2

Author Comment

by:PSGITech
ID: 36504333
what if I put all test users in a new goup, added that group into the properties of the production GPO and set it to deny "apply group policy"  Create a new GPO with the test WPAD proxy settings and only apply it to the group with the test users in it?
0
 
LVL 35

Expert Comment

by:Joseph Daly
ID: 36504349
Jfletchster has the right idea. A sub OU will allow the other GPOs to propogate to your test OU and still have your policy applied.
0
 
LVL 35

Expert Comment

by:Joseph Daly
ID: 36504373
Your idea with the security filtering will work as well.
0
 
LVL 2

Author Comment

by:PSGITech
ID: 36504380
JFletchers idea is a good one but the way all the GPO are setup currently, they are not applied to OU's, that are created and linked but apply to group's, not OU's
0

Featured Post

Transaction Monitoring Vs. Real User Monitoring

Synthetic Transaction Monitoring Vs. Real User Monitoring: When To Use Each Approach? In this article, we will discuss two major monitoring approaches: Synthetic Transaction and Real User Monitoring.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…

724 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question