[SBS 2003] Group Policies
Since a user can not belong to multiple OUs is there a way to apply a policy to only certain users and not all Authenticated Users?
Thanks
[147 byte] By [
RobDog888] at [2007-11-19 21:47:20]

# 2 Re: [SBS 2003] Group Policies
I'm using the GPMC to do this and not the local policy. Took some time off from this but now I am looking into it again.
Perhaps I am missing your point here? I dont want to log on as each and every user to set a policy for them.
# 4 Re: [SBS 2003] Group Policies
No I dont mean non-authenticaed users, just want to have a specific security group or specific authenticated user. The "Authenticed Users" is a group that ISA creates that included accounts as its description.
# 5 Re: [SBS 2003] Group Policies
I don't know how off the top of my head, but as long as they are assigned to a group within the security settings of Windows, you can apply a group policy to them. Simply use the policy editor.
My boss just got SBS2003 so I will have him look into this.
# 6 Re: [SBS 2003] Group Policies
Hopefully you can see what I mean. Look at the Default Policy and Default Policy for Domain Controlers. They have it applied to the "Authenticaed Users" "Group". I read that it was not recommended to edit the default policies but rather add a new GPO and link to it. I tried this but it either isnt being applied or there are other policies overridding it.
ISA 2004 is running on SBS 2003 also so I think the GPOs are created by it?
# 7 Re: [SBS 2003] Group Policies
The policy still has to be linked to an OU hierarchy where the users/group belongs, but you can specify that only certain users/group have the policy applied.
Just add the users/group that you want the policy to apply to into the [Security Filtering] section and remove the Authenticated Users group.
# 8 Re: [SBS 2003] Group Policies
I think I got a bit closer.
Since this is a User configuration policy it is affecting the users workstations too. I just need it to be a Server configuration and apply only to certain users. I found that if I link the GPO to the My Business > Computers > SBSServers it may work but I cant test it yet until off hours. I did create a Security Group for just the users I need it apply to and selected it in the Security Filtering.
I'll post an update when I get it.