gerrit deikeêëŠÐÞŠg�ŠÇ.²È¨žÉ¢rº,¡û\¢

Hi!

Does anybody know which settings must be applied to a user-account so that
they will work? (f. i. RIS-settings)

I'm in a project where the customer has a account-forrest and a
ressource-forrest and I want to make sure that I don't miss any of the
settings!

Thanks!

Gerrit

meinolf weber [mvp-ds]

Hello Gerrit,

Please dsecribe more detailed the different forests, also how are they connected,
with trust? A user account belongs to one domain not to different forests.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

gerrit deikeêëŠÐÞŠg�ŠÇ.²È¨žÉ¢rº,¡û\¢

Hello Meinolf,

the two forrests are connected via forrest-trust. The user accounts are in
the account forrest but the computer accounts are in the resource forrest.

What I need is a list of all GPO-settings that must be assigned to a user
account so that they will work.

The RIS-settings are an example. They will not work when assigned to a
computer account because there is no OS on the client and (usually) we want
to use these settings to differ between users. Are there any more such
settings that only make sense or can only be applied to user accounts?

Cheers,

Gerrit

meinolf weber [mvp-ds]

Hello Gerrit,

If the computer is in the resource forest RIS has to be setup there, nothing
to do with the user during RIS installation. RIS does not belong to users.

GPO's for the user you have to configure in the forest where the user belongs
to. Policies depends on your requirements.

I can not really understand why you split users and computer with a trust.
You have additional work, because computer policies has to be configured
in the domain where the users are and the user policies in the other one.

IMHO you create yourself an administrative chaos.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

gerrit deikeêëŠÐÞŠg�ŠÇ.²È¨žÉ¢rº,¡û\¢

Hello Meinolf,

though I agree as far as the administrative chaos goes, I have no choice in
this matter as that is how the customer is setup. (To make things worse the
accounts domain is being administerd by T-Systems and not by the customer
himself...)

That is why I want to know which settings only make sense when applied to
user accounts.

Btw. the RIS settings MUST be applied to the user account if your planning
on using different settings on a per user basis, which is the typical
sitiuation. Otherwise you have to apply the settings to the RIS-server,
because that is the computer on which the user is loging on to!

Cheers,

Gerrit Deike
MCT, MCITP: Exchange, MCTS: Exchange, MCSE: Messaging, MCSA: Messaging,
Small Business Specialist

bruce sanderson

Not sure if I understand your question properly, so if this is not helpful,
please just ignore it.

Group Policy Management Editor, the settings in the User Configuration part
(lower half) get applied to user accounts.

Those in the Computer Configuration part (upper half) get applied to
computer accounts.

The only exception is that if the "User Group Policy loopback processing
mode" setting is enabled, the settings in the User Configuration part get
applied to user accounts when the user logs on at a computer to which the
GPO, with User Configuration settings in it, is applied.

I'm not familiar with RIS (I assume you mean Remote Installation Services),
but I can't find any GPO settings relating to RIS. If you describe where
these settings are to be found it would be useful.

--
Bruce Sanderson
http://members.shaw.ca/bsanders

It is perfectly useless to know the right answer to the wrong question.

gerrit deikeêëŠÐÞŠg�ŠÇ.²È¨žÉ¢rº,¡û\¢

Hi Bruce,

Thanks for you hepl, but I'm afraid you have a small misunderstanding when
it comes to GPOs. Computer configuration and user configuration are not
specifically applied only to user accounts or computer accounts. They modify
certain parts of the registry. Computer configuration modifies the
HKEY_LOCAL_MASHINE values and user configuration modiefies the
HKEY_CURRENT_USER values. Both can be applied either to user or computer
accounts or both. This makes using GPOs so flexible.

Thanks to a german MVP I've found a solution for my problem. I'll create my
own file by exporting a GPO in which all settings are activated and then
filtering through the descriptions of the policies.

Cheers,

Gerrit