asked on

Group policy application for a group of users

I'm creating a group policy that I would like to apply to only certain user groups, regardless of which computer they login from.

I am seeing conflicting articles when searching Google. What is the Best practice you know of?

I don't think it should be relevant to the question above, however, the GPO is to copy some files from a network share to a local directory on the C Dr. in the public folder of the machine a particular user is using.

arnold

presumably you mean a User GPO, you would use the security filtering remove the authenticated users which applies to both users and computers.
and add a security group or security groups of which the users are members.

It might take two logins for the GPO to be refreshed.....
but it will only be readable for application by the user who is member of any of the security groups that you add in the security filtering section.

User based rule will copy it faster as a User GPO is processed each login, but you might be copying it multiple times and run the risk that its attributes would bar access.

why not create a link, shortcut to the file such that you will always have a single copy of the file versus possibly multiple versions...

ASKER CERTIFIED SOLUTION

McKnife

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

arnold

Thanks for the info.
have to revisit/refresh process going forward.