Different Group Policy for only one machine

[mikenb]

Hi,

I create a different Group Policy for one machine in the domain.

All users have to permissions to log on that machine.

How do i do to force the run of "user configuration" of the policy, only on that machine, for all users.

Its a very restrictive policy, so i dont want to run it on the desktops, only on that machine.

Thanks

Mike

 

[gazzanewpy]

In the GPO for the computer, ensure you have the Loopback processing enabled and choose either MERGE if you want this GPO's settings to merge with any existing policies or set it so that it REPLACEs any other user configuration setting. Look under the Computer Config for Loopback Processing, then enable and select the one you require.

 

[mikenb]

I enabled the policy (chose replace) and in the properties of the policy i put the machine to aply this policy.

but didn´t workout.

 

[bcastner]

Remove the user's permissions under NTFS from the folder c:\winnt\system32\Group Policy

 

[mikenb]

The only permissions that the "Group Policy"
folder have is - System, Machine\Administrators and Authenticated Users.

I removed Authenticated Users and rebooted the machine, and didnt work.

 

[bcastner]

I know this works.

You may need to add the username, and then remove all permissions.

http://www.jsiinc.com/SUBL/tip5600/rh5619.htm

http://techrepublic.com.com/5100-6270-1040230.html

http://www.theeldergeek.com/gp07.htm