Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Windows 2008 Group Policy

Posted on 2011-09-08
8
Medium Priority
?
268 Views
Last Modified: 2012-05-12
I have a GPO setup that is adding proxy settings to point to a WPAD file for my organization.  I have this GPO being applied to the domain computers and authenticated users groups.  I want to test out a new WPAD file for a few users.  How should I setup the GPO for the new WPAD so that it only applies to a few users and not the entire organization?
0
Comment
Question by:PSGITech
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 35

Expert Comment

by:Joseph Daly
ID: 36504259
I would create a new OU, block policy inheritance on that OU, then create and apply your new testing group policy on that one. This way you can ensure that only your GPO is being applied and nothing else.

You can then move the test users into this new OU and they should get the settings applied.
0
 
LVL 2

Author Comment

by:PSGITech
ID: 36504287
xxdcmast that is a good idea, the problem is I have a few other GPO's that need to be applied as per company policy and blocking inheritance will prevent them from being applied, do you have any other ideas?
0
 
LVL 11

Expert Comment

by:madhatter5501
ID: 36504304
create a test user put into that ou?
0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 
LVL 8

Accepted Solution

by:
jfletchster earned 2000 total points
ID: 36504309
You could create a custom ou to put the users in on a temp basis with the other OU's if you made it a sub folder of their existing ou and set your new GPO to that ou and enforce the policy it will over-ride all above GPO settings
0
 
LVL 2

Author Comment

by:PSGITech
ID: 36504333
what if I put all test users in a new goup, added that group into the properties of the production GPO and set it to deny "apply group policy"  Create a new GPO with the test WPAD proxy settings and only apply it to the group with the test users in it?
0
 
LVL 35

Expert Comment

by:Joseph Daly
ID: 36504349
Jfletchster has the right idea. A sub OU will allow the other GPOs to propogate to your test OU and still have your policy applied.
0
 
LVL 35

Expert Comment

by:Joseph Daly
ID: 36504373
Your idea with the security filtering will work as well.
0
 
LVL 2

Author Comment

by:PSGITech
ID: 36504380
JFletchers idea is a good one but the way all the GPO are setup currently, they are not applied to OU's, that are created and linked but apply to group's, not OU's
0

Featured Post

Free Backup Tool for VMware and Hyper-V

Restore full virtual machine or individual guest files from 19 common file systems directly from the backup file. Schedule VM backups with PowerShell scripts. Set desired time, lean back and let the script to notify you via email upon completion.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Suggested Courses

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question