Settings for computer per user
hello.
that's problem: need configure computer settings based on logging user. target setting "set roaming profile path users logging onto computer". if user belongs specific group, apply policy computers in ou, if not - deny.
tried doing in test environment:
created user group "roaming users"
created separate ou, put affected computers into
created gpo linked ou, in security filtering added "roaming users" (read, apply)
the following occurs: if leave authenticated users (read, apply) in filtering, users logging onto pc have profiles roaming. if remove apply property, nobody have profiles roaming.
tested , without loopback - result same. , don't want create group of computers (maybe except using wildcards in wmi)
any ideas? looking wmi filtering, not sure.
preventing advices configuring roaming profiles property of user: in production have different locations , slow links between. configure separate gpos each 1 different target servers replicating each other.
as option, if possible use wildcards computer names (like "ru-%", "us-%" etc.) , store computers in 1 ou, useful too.
hi,
>>target setting "set roaming profile path users logging onto computer". if user belongs specific group, apply policy computers in ou, if not - deny.
before going further, why this? based on description , according me, there no way achieve via group policy. group policy, once settings applied computers, users logging onto computers apply settings.
best regards,
frank shen
Windows Server > Group Policy
Comments
Post a Comment