Group policy for new environment

Good evening experts

I'm currently testing a new windows 7 build for a client, I created a standard image, and want to get existing users to start login in and get a field for the new environment ,
The old environment comprises of windows xp and office 2002, they moving to win 7 with office 2k10, there are 8 machines ready for staff to use for testing,
I've created some custom windows 7 GPO's that I want applied only to these new machines, what is the best way I can achieve this, (ie have my newly created GPOs apply only to these 8 machines)

Kindly advise
Craig
craigleenzAsked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

x
 
Jonas SmithConnect With a Mentor Commented:
Hi Craig,

Assuming they are computer policies (defined under the computer configuration section of the group policy) which you wish you apply then the easiest way of doing this would be to create a new OU in active directory and place the Windows 7 computer accounts in there. You can then link the GPOs only to the new OU so they will therefore only apply to the computer accounts in that OU.

If you then wish to apply User policies (defined under the user configuartion section of the group policy) which only apply when a user logs onto the a Windows 7 PCs but not thier Windows XP PCs then I'd suggest using Loop Back Processing. This will cause the user policies which are linked to the OU in which the computer account resides to apply and not those linked to the OU in which the user account sits.

This can be done as follows.

Create a new group policy and link it to the Windows 7 Computers OU.

Change the following setting to Replace.

Computer Configuration\Policies\Administrative Templates\System\Group Policy\User Group Policy Loopback Processing Mode

You can now create and link User policies to the OU containing the Windows 7 computers. These policies will only then apply when a user logs onto a Win 7 computer.

Bear in mind that if you have any group policies that you wish to apply to  users regardless of which PC they log onto you will need to link these to the new OU for the Windows 7 PCs aswell.

I generally only this for terminal server but see no reason why this won't work for you what you are trying to achive.

Here is  link which explains the loopback processing part in a more succinct way.

http://social.technet.microsoft.com/wiki/contents/articles/windows-server-understand-user-group-policy-loopback-processing-mode.aspx

Rich.
0
 
craigleenzAuthor Commented:
Thank u so much rich, I will check out in the morning and report back
0
 
craigleenzAuthor Commented:
Brilliant!
0
All Courses

From novice to tech pro — start learning today.