Solved

GPO - adding users to network operators group

Posted on 2013-05-13
2
1,239 Views
Last Modified: 2013-05-13
Hi all,

2003 domain - windows 7

I want my laptop users to be able to change the IP address of their machines. In order to do this I want to add them to the Network configurations Operators group via grou policy.

I have created a GPO at the top level of my domain (users and computers objects are placed underneath) and added the builtin\network configurations operators adding domain users to it.

The GPO is filtered by group which all laptops users are a member of.

However, the GPO is not applying.

If I run RSOP.msc i can see it is applying the correct GPO but not the restricted group.

Any ideas?
0
Comment
Question by:MJB2011
2 Comments
 

Author Comment

by:MJB2011
ID: 39160897
I changed the filter to authenticated users and It worked? what is the reason for this not to work with my users groups?
0
 
LVL 10

Accepted Solution

by:
ienaxxx earned 500 total points
ID: 39160943
it's because it's a COMPUTER settings and so you need to include laptops' accounts (<computername>$) in a group that has access to the policy.

Users can't apply computer settings.

Authenticated users includes Computer accounts.

HTH
Bye! :-)
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I was supporting a handful of Windows 2008 (non-R2) 2 node clusters with shared quorum disks. Some had SQL 2008 installed and some were just a vendor application that we supported. For the purposes of this article it doesn’t really matter which so w…
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question