Group Policy help

Discussion in 'Networks' started by Nelix, Jun 9, 2010.

  1. Nelix
    Honorary Member

    Nelix Gigabyte Poster

    1,416
    3
    82
    Hi all, looking for some advice/guidance

    We recently went through a process of removing all PST's from users and the ability to create them via group policy.

    Now we have a requirement to have system created PST's for specific users.

    We currently have a default workstation policy that includes the setting to prevent PST's to outlook profiles, along with other settings.

    If I create a separate policy that with the following setting "Only Shared-Exclusive PST's can be added" and apply that to a new group that contains the users that we want to be able to use these PST's, would that work? or would the default workstation policy setting overide it?

    Whats the best way to accomplish this?
     
    Certifications: A+, 70-210, 70-290, 70-291, 74-409, 70-410, 70-411, 70-337, 70-347
    WIP: 70-346
  2. craigie

    craigie Terabyte Poster

    3,020
    174
    155
    The most granular policy will will.

    So lets say I had the following being applied:

    Applied To Domain > GPO1 - Turn Off

    Applied To OU > GPO2 - Turn On

    Applied To Sub OU Of OU > GPO3 - Turn Off

    GPO3 will win mate.
     
    Certifications: CCA | CCENT | CCNA | CCNA:S | HP APC | HP ASE | ITILv3 | MCP | MCDST | MCITP: EA | MCTS:Vista | MCTS:Exch '07 | MCSA 2003 | MCSA:M 2003 | MCSA 2008 | MCSE | VCP5-DT | VCP4-DCV | VCP5-DCV | VCAP5-DCA | VCAP5-DCD | VMTSP | VTSP 4 | VTSP 5
  3. Nelix
    Honorary Member

    Nelix Gigabyte Poster

    1,416
    3
    82
    Thanks Craigie

    What happens both policys are applied at the same OU etc?
     
    Certifications: A+, 70-210, 70-290, 70-291, 74-409, 70-410, 70-411, 70-337, 70-347
    WIP: 70-346
  4. craigie

    craigie Terabyte Poster

    3,020
    174
    155
    The the policy with the highest priority will win.

    Best design is to create a Sub OU then move the users into that and then link the GPO to the Sub OU mate.

    Then you know that the correct GPO is being applied.
     
    Certifications: CCA | CCENT | CCNA | CCNA:S | HP APC | HP ASE | ITILv3 | MCP | MCDST | MCITP: EA | MCTS:Vista | MCTS:Exch '07 | MCSA 2003 | MCSA:M 2003 | MCSA 2008 | MCSE | VCP5-DT | VCP4-DCV | VCP5-DCV | VCAP5-DCA | VCAP5-DCD | VMTSP | VTSP 4 | VTSP 5
  5. kevicho

    kevicho Gigabyte Poster

    1,219
    58
    116
    Another thing to look for is each policy comes with an "explanation", this will give you a good idea of what.

    Also familiarise yourself with group policy results and modelling wizards, these are a great tool and give you a list of what setting is applied and the winning gpo

    I'd imagine your using the GPMC (Group policy management console) as opposed to the bundled one?
     
    Certifications: A+, Net+, MCSA Server 2003, 2008, Windows XP & 7 , ITIL V3 Foundation
    WIP: CCNA Renewal

Share This Page

Loading...
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.