[SBS 2003] Group Policies

Since a user can not belong to multiple OUs is there a way to apply a policy to only certain users and not all Authenticated Users?
Thanks
[147 byte] By [RobDog888] at [2007-11-19 21:47:20]
# 1 Re: [SBS 2003] Group Policies
As long as you are using policy editor you can log on as the user and then set the current users policies.
PeejAvery at 2007-11-10 3:40:15 >
# 2 Re: [SBS 2003] Group Policies
I'm using the GPMC to do this and not the local policy. Took some time off from this but now I am looking into it again.

Perhaps I am missing your point here? I dont want to log on as each and every user to set a policy for them.
RobDog888 at 2007-11-10 3:41:15 >
# 3 Re: [SBS 2003] Group Policies
What I don't get is how you have non-authenticated users? Do you have an anonymous login?
PeejAvery at 2007-11-10 3:42:15 >
# 4 Re: [SBS 2003] Group Policies
No I dont mean non-authenticaed users, just want to have a specific security group or specific authenticated user. The "Authenticed Users" is a group that ISA creates that included accounts as its description.
RobDog888 at 2007-11-10 3:43:20 >
# 5 Re: [SBS 2003] Group Policies
I don't know how off the top of my head, but as long as they are assigned to a group within the security settings of Windows, you can apply a group policy to them. Simply use the policy editor.

My boss just got SBS2003 so I will have him look into this.
PeejAvery at 2007-11-10 3:44:19 >
# 6 Re: [SBS 2003] Group Policies
Hopefully you can see what I mean. Look at the Default Policy and Default Policy for Domain Controlers. They have it applied to the "Authenticaed Users" "Group". I read that it was not recommended to edit the default policies but rather add a new GPO and link to it. I tried this but it either isnt being applied or there are other policies overridding it.

ISA 2004 is running on SBS 2003 also so I think the GPOs are created by it?
RobDog888 at 2007-11-10 3:45:21 >
# 7 Re: [SBS 2003] Group Policies
The policy still has to be linked to an OU hierarchy where the users/group belongs, but you can specify that only certain users/group have the policy applied.

Just add the users/group that you want the policy to apply to into the [Security Filtering] section and remove the Authenticated Users group.
Craig Gemmill at 2007-11-10 3:46:14 >
# 8 Re: [SBS 2003] Group Policies
I think I got a bit closer.

Since this is a User configuration policy it is affecting the users workstations too. I just need it to be a Server configuration and apply only to certain users. I found that if I link the GPO to the My Business > Computers > SBSServers it may work but I cant test it yet until off hours. I did create a Security Group for just the users I need it apply to and selected it in the Security Filtering.

I'll post an update when I get it.
RobDog888 at 2007-11-10 3:47:21 >