Group Policy / Wsus ...
Results 1 to 3 of 3

Thread: Group Policy / Wsus ...

  1. #1
    Only african to own a PC! Cider's Avatar
    Join Date
    Jun 2003
    Location
    Israel
    Posts
    1,683

    Group Policy / Wsus ...

    Hey Guys,

    All my machines are connected to my sus servia via a domain policy.

    My boss seems to think that he doesnt fall under this and wants to edit everything locally on his laptop.

    I edited his GP settings on his laptop.

    Question: Will this override the domain policy?

    Will have have to create another OU in AD and move him into there with another policy?

    Whats the best practise here? First time actually playing with this so help will be appreaciated. (Ms M

    Thanks
    The world is a dangerous place to live; not because of the people who are evil, but because of the people who don't do anything about it.
    Albert Einstein

  2. #2
    Some Assembly Required ShagDevil's Avatar
    Join Date
    Nov 2002
    Location
    New Jersey
    Posts
    718
    Question: Will this override the domain policy?
    Nope. The other way around. Local GP will be processed first. Then Domain Policy will overwrite those settings.

    Will have have to create another OU in AD and move him into there with another policy?
    Hmm. I would create another OU & block GP inheritance on that OU.
    The object of war is not to die for your country but to make the other bastard die for his - George Patton

  3. #3
    Gonzo District BOFH westin's Avatar
    Join Date
    Jan 2006
    Location
    SW MO
    Posts
    1,188
    Hmm. I would create another OU & block GP inheritance on that OU.
    This is what I would do as well. More specifically move the computer to the OU, as opposed to the user, as WSUS policies are applied to the computer settings.

    Depending on what other policy settings you have, you may want to link certain GPOs specifically to the new OU. I would double check to see what settings are applied to that computer with Group Policy Results once you have it set up, just to make sure all of the right policies are applied.
    \"Those of us that had been up all night were in no mood for coffee and donuts, we wanted strong drink.\"

    -HST

Similar Threads

  1. Windows Error Messages
    By cheyenne1212 in forum Miscellaneous Security Discussions
    Replies: 7
    Last Post: February 1st, 2012, 02:51 PM
  2. The Best Computer Money can Buy !
    By Mystery Man in forum Hardware
    Replies: 15
    Last Post: December 12th, 2006, 01:21 AM
  3. Using IPSec to Secure Computers and Network Traffic.
    By Tiger Shark in forum The Security Tutorials Forum
    Replies: 0
    Last Post: October 7th, 2004, 08:18 PM
  4. Basic IIS Lockdown Using Scripts and Group Policy
    By phishphreek in forum Web Security
    Replies: 0
    Last Post: August 14th, 2003, 05:17 AM
  5. Opening Group Policy Files for Exclusive Read Blocks Policy Application
    By SDK in forum Microsoft Security Discussions
    Replies: 0
    Last Post: April 5th, 2002, 04:21 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •