| Author | Messages | |
CrawfordS
Posts:44
 | | 08/23/2005 4:25 AM |
| You are correct.
The best you can do is setting the filter to apply only to W2K, which only XP will process and therefore ignore. The W2K machines won't see the filter, but it'll be ok since they're the ones you want to run it anyways.
Of course, this would imply creating an 'inverse' GPO of sorts, the feasibility of which would be dependent on what the original GPO was supposed to do.
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx [mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Cothern Jeff D. Team EITC
Sent: Tuesday, August 23, 2005 6:57 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: RE: [ActiveDir] GPO with Computer Accounts?
Ok little confused here.. I was under the impression that As far as WMI filtering for OS that 2000 would ignore this and still run the GPO. Even though you had it filter to only apply on XP.
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx [mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Hunter, Laura E.
Sent: Thursday, August 18, 2005 4:11 PM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: RE: [ActiveDir] GPO with Computer Accounts?
Are you running 2003 AD? You can use WMI filtering to dynamically restrict how a GPO is applied:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/6237b9b2-4a21-425e-8976-2065d28b3147.mspx
(That link includes an example of a WMI filter that filters on "Windows XP Professional").
> -----Original Message-----
> From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
> [mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Harding,
> Devon
> Sent: Thursday, August 18, 2005 4:06 PM
> To: ActiveDir@xxxxxxxxxxxxxxxxxx
> Subject: RE: [ActiveDir] GPO with Computer Accounts?
>
> Is it possible to apply this to only Windows XP Computers?
>
> -----Original Message-----
> From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
> [mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of
> deji@xxxxxxxxxxxxxx
> Sent: Thursday, August 18, 2005 2:48 PM
> To: ActiveDir@xxxxxxxxxxxxxxxxxx
> Subject: RE: [ActiveDir] GPO with Computer Accounts?
>
> Yes.
>
>
> Sincerely,
>
> Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I
> Microsoft MVP - Directory Services
> www.readymaids.com - we know IT
> www.akomolafe.com
> Do you now realize that Today is the Tomorrow you were worried about
> Yesterday? -anon
>
> ________________________________
>
> From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx on behalf of Harding, Devon
> Sent: Thu 8/18/2005 11:30 AM
> To: ActiveDir@xxxxxxxxxxxxxxxxxx
> Subject: RE: [ActiveDir] GPO with Computer Accounts?
>
>
>
> Does the group Authenticated Users includes domain computers?
> This way, I
> can use this to apply the GPO to all computers.
>
> -----Original Message-----
> From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
> [mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of
> deji@xxxxxxxxxxxxxx
> Sent: Thursday, August 18, 2005 12:00 PM
> To: ActiveDir@xxxxxxxxxxxxxxxxxx
> Subject: RE: [ActiveDir] GPO with Computer Accounts?
>
> Since you said you want to apply it to "all computer account in a
> domain", you'd need to apply it at the Domain level. If you don't want
> it to apply to the servers (since you said you moved them to a
> separate OU), you can block the GPO at the OU where the servers now
> reside.
> Alternatively, you could move
> all the computers you want to apply the GPO to into their own OU (I am
> thinking that these are different from the "servers") and apply the
> GPO only to that OU.
>
>
> Sincerely,
>
> Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I
> Microsoft MVP - Directory Services
> www.readymaids.com - we know IT
> www.akomolafe.com
> Do you now realize that Today is the Tomorrow you were worried about
> Yesterday? -anon
>
> ________________________________
>
> From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx on behalf of Harding, Devon
> Sent: Thu 8/18/2005 8:51 AM
> To: ActiveDir@xxxxxxxxxxxxxxxxxx
> Subject: [ActiveDir] GPO with Computer Accounts?
>
>
>
> How can I apply a GPO to all computer accounts in a domain? I've
> already moved my servers out of the computers container into a
> separate OU, but I can't apply a GPO to a container, only domains and
> OU's
>
> Devon Harding
> Windows Systems Engineer
> Southern Wine & Spirits - BSG
> 954-602-2469
>
>
> -----------------------------------------
> __________________________________
> This message and any attachments are solely for the intended recipient
> and may contain confidential or privileged information. If you are
> not the intended recipient, any disclosure, copying, use or
> distribution of the information included in the message and any
> attachments is prohibited. If you have received this communication in
> error, please notify us by reply e-mail and immediately and
> permanently delete this message and any attachments. Thank You.
>
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
>
>
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
>
>
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
>
>
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
|
|