Solved

Group policy for new environment

Posted on 2012-03-29
3
403 Views
Last Modified: 2012-04-02
Good evening experts

I'm currently testing a new windows 7 build for a client, I created a standard image, and want to get existing users to start login in and get a field for the new environment ,
The old environment comprises of windows xp and office 2002, they moving to win 7 with office 2k10, there are 8 machines ready for staff to use for testing,
I've created some custom windows 7 GPO's that I want applied only to these new machines, what is the best way I can achieve this, (ie have my newly created GPOs apply only to these 8 machines)

Kindly advise
Craig
0
Comment
Question by:craigleenz
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 1

Accepted Solution

by:
Jonas Smith earned 500 total points
ID: 37780792
Hi Craig,

Assuming they are computer policies (defined under the computer configuration section of the group policy) which you wish you apply then the easiest way of doing this would be to create a new OU in active directory and place the Windows 7 computer accounts in there. You can then link the GPOs only to the new OU so they will therefore only apply to the computer accounts in that OU.

If you then wish to apply User policies (defined under the user configuartion section of the group policy) which only apply when a user logs onto the a Windows 7 PCs but not thier Windows XP PCs then I'd suggest using Loop Back Processing. This will cause the user policies which are linked to the OU in which the computer account resides to apply and not those linked to the OU in which the user account sits.

This can be done as follows.

Create a new group policy and link it to the Windows 7 Computers OU.

Change the following setting to Replace.

Computer Configuration\Policies\Administrative Templates\System\Group Policy\User Group Policy Loopback Processing Mode

You can now create and link User policies to the OU containing the Windows 7 computers. These policies will only then apply when a user logs onto a Win 7 computer.

Bear in mind that if you have any group policies that you wish to apply to  users regardless of which PC they log onto you will need to link these to the new OU for the Windows 7 PCs aswell.

I generally only this for terminal server but see no reason why this won't work for you what you are trying to achive.

Here is  link which explains the loopback processing part in a more succinct way.

http://social.technet.microsoft.com/wiki/contents/articles/windows-server-understand-user-group-policy-loopback-processing-mode.aspx

Rich.
0
 

Author Comment

by:craigleenz
ID: 37780809
Thank u so much rich, I will check out in the morning and report back
0
 

Author Closing Comment

by:craigleenz
ID: 37795395
Brilliant!
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article was originally published on Monitis Blog, you can check it here . Today it’s fairly well known that high-performing websites and applications bring in more visitors, higher SEO, and ultimately more sales. By the same token, downtime…
Determining the an SCCM package name from the Package ID
This Micro Tutorial will teach you how to the overview of Microsoft Security Essentials. This is a free anti-virus software that guards your PC against viruses, spyware, worms, and other malicious software. This will be demonstrated using Windows…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…
Suggested Courses

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question