humbletech99
Programmer
I tried adding a logon script to all machine on a particular floor of our building so I created an OU and added a test machine inside it. I created a GPO specifically for that OU and assigned the logon script I wanted under Logon Scripts in the USER section of the GPO.
Tested it, but it didn't work, nothing executed, so I used RSoP to check if it was properly applied. The only content of the OU was the machine account so I did RSoP on that object.
Of course, it showed the policy wasn't applied, only the Computer section was applied to it. So it seems that the computer section is applied to computer objects and the User section is applied to user objects. Ok, I should have known that but it's been many years since I did the theory.
The question now is:
Is there not a way to make sure that for a bunch of computers, any user who logs on to those computers will get some GPO settings if they log on to those computers but not if they log on to other computers?
As a workaround, I have created OUs for users and split them up this way to get the policies to them, but it seems to me that my first idea of making a policy apply to computers and any users that log on to those computers is a smarter way of doing it for what I want to do.
This is all so I can assign the default printer for whoever is on a machine to be the printer on the same floor as the machine (makes sense). Since it is the location of the machine which should determine the default printer used, not the user account I would prefer if I could do it my original way.
Anybody got any feedback or ideas on this?
Tested it, but it didn't work, nothing executed, so I used RSoP to check if it was properly applied. The only content of the OU was the machine account so I did RSoP on that object.
Of course, it showed the policy wasn't applied, only the Computer section was applied to it. So it seems that the computer section is applied to computer objects and the User section is applied to user objects. Ok, I should have known that but it's been many years since I did the theory.
The question now is:
Is there not a way to make sure that for a bunch of computers, any user who logs on to those computers will get some GPO settings if they log on to those computers but not if they log on to other computers?
As a workaround, I have created OUs for users and split them up this way to get the policies to them, but it seems to me that my first idea of making a policy apply to computers and any users that log on to those computers is a smarter way of doing it for what I want to do.
This is all so I can assign the default printer for whoever is on a machine to be the printer on the same floor as the machine (makes sense). Since it is the location of the machine which should determine the default printer used, not the user account I would prefer if I could do it my original way.
Anybody got any feedback or ideas on this?
