fatboy1271
asked on
Group Policy Shortcut with IP Range
I've got a few GPs for putting Network Shares on Win7 Desktops and Favorites. It works amazing well; however, I found an instance on Friday where it needs some tweaking.
The Network Shares are coming off a Meta-Data Controller that has two Nodes for fail-over. This is great because the system keeps chugging away if one Node hiccups or fails completely. The issue though is that the average user doesn't realize that there are two Nodes, what a Node even is, and how to access the shares from the other Node's IP address (or what an IP address is...). On Friday Node A must have went down momentarily and then Node B became the primary Node. This caused all of the Shares to then be hosted by xxx.xxx.xxx.9 whereas everyone's GP setting for the Desktop and Favorites Shortcuts is xxx.xxx.xxx.8.
Is there a way in GP to set up the Shortcuts to use an IP range rather than just the static IP address for Node A? That way if Node B because the primary everyone's not freaked out that they've "lost everything!!!"?
The Network Shares are coming off a Meta-Data Controller that has two Nodes for fail-over. This is great because the system keeps chugging away if one Node hiccups or fails completely. The issue though is that the average user doesn't realize that there are two Nodes, what a Node even is, and how to access the shares from the other Node's IP address (or what an IP address is...). On Friday Node A must have went down momentarily and then Node B became the primary Node. This caused all of the Shares to then be hosted by xxx.xxx.xxx.9 whereas everyone's GP setting for the Desktop and Favorites Shortcuts is xxx.xxx.xxx.8.
Is there a way in GP to set up the Shortcuts to use an IP range rather than just the static IP address for Node A? That way if Node B because the primary everyone's not freaked out that they've "lost everything!!!"?
ASKER
Thanks Bryant. I will investigate into the DNS A Record and I think that may be the correct path. I will update as I learn.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
ASKER
I know this was closed because I didn't respond; however, I did find the correct answer to my question: How to exclude individual users or computers from a Group Policy Object
This was 100% what I was looking for, very easy, and very helpful!!!
From the link above, full credit to Alan Burchill:
Step 1. Open the Group Policy Object that you want to apply an exception and then click on the “Delegation” tab and then click on the “Advanced” button.
Step 2. Click on the “Add” button and select the group (recommended) that you want to exclude from having this policy applied.
Step 3. In this example I am excluding the “Users GPO Exceptions” group for this policy. Select this group in the “Group or user names” list and then scroll down the permission and tick the “Deny” option against the “Apply Group Policy” permission.
Now any members of this “User GPO Exceptions” security group will not have this Group Policy Object applied. Having a security group to control this exception makes it much easier to control as someone only needs to modify the group membership of the group to makes changes to who (or what) get the policy applied. This makes the delegation of this task to level 1 or level 2 support much more practical as you don’t need to grant them permission to the Group Policy Objects.
This was 100% what I was looking for, very easy, and very helpful!!!
From the link above, full credit to Alan Burchill:
Step 1. Open the Group Policy Object that you want to apply an exception and then click on the “Delegation” tab and then click on the “Advanced” button.
Step 2. Click on the “Add” button and select the group (recommended) that you want to exclude from having this policy applied.
Step 3. In this example I am excluding the “Users GPO Exceptions” group for this policy. Select this group in the “Group or user names” list and then scroll down the permission and tick the “Deny” option against the “Apply Group Policy” permission.
Now any members of this “User GPO Exceptions” security group will not have this Group Policy Object applied. Having a security group to control this exception makes it much easier to control as someone only needs to modify the group membership of the group to makes changes to who (or what) get the policy applied. This makes the delegation of this task to level 1 or level 2 support much more practical as you don’t need to grant them permission to the Group Policy Objects.
Another option if clustering is not an option, would be to create a DNS A record.
https://support.microsoft.com/en-us/kb/168321 from Microsoft will explain, assuming you are using MS DNS.