Group Policy Headache

[vinhx76]

I can't seem to understand why I cannot apply a group policy under Computer Configuration. I am able to apply anything under the User Configuration like folder redirection and desktop redirection and login script, but nothing works under Computer Configuration like Port exception. Any ideas would be appreciated.

I am setting read and apply policy security.

 

[da sponge]

And you're applying this to a computer OU, not a user OU?

 

[vinhx76]

I am applying it to a group that I have created

 

[Pr3z]

I am applying it to a group that I have created

Is it a user based group or a PC based croup. That will make the difference.

 

[vinhx76]

I don't know, how do you specified that it is a computer based group? Group type: Security or Distribution.

And under Group scope, what is the difference between Domain, Global and Universal.

 

[da sponge]

I don't know, how do you specified that it is a computer based group? Group type: Security or Distribution.

And under Group scope, what is the difference between Domain, Global and Universal.

what kind of objects are in the group, pcs or users? what OU is the policy acting on?

 

[vinhx76]

I have 3 OU's:

1) Users
2) Computers
3) Groups


Under the User's OU, I have a list of all the domain users.

Under the Computer OU, I have all the Pc's in the Domain.

Under the groups OU, I have several groups from printing rights to mapping Z drive.

I want to create a Group Policy to open port 5000 for VNC on all my PC's in my domain whcih is under Computer OU, how do I do this?

 

[da sponge]

create your policy and have it apply to the computers ou.

 

[vinhx76]

How to I apply it to the computer OU?

 

[da sponge]

link it inside of the ou in the group policy management snap in.

 

[dbwillis]

If your using the group policy management console.

- right click the computers OU that you want to apply the GP to, there should be an option "link a GPO" (or something along those lines) and then direct it to the GPO you created..

I usually name my GPO's accordingly:>

1.0 - Computers - RedirectedFolders
1.0 - Computers - SecuritySettings
1.0 - Users - RedirectedFolders
1.0 - Users - SecuritySettings
1.0 - Domain - PasswordSettings
1.0 - Domain - DisabledServices

When I update GPO's I give them a descriptive name....1.1 - Domain - DisabledServices.

Its easier to revert back to the previous GPO if anything bad happens, and when checking gpresult results, tells you what GPO is applied

 

[vinhx76]

It works! Thanks a bunch!