Group Policy Applied to Different OUs

[benace]

Greetings-

I'm working to build a site policy for my domain, and have run into a few roadblocks. I can't get the "User Configuration" settings to apply to computer objects, and vice versa.

I'm going to simply the problem for explanation purposes.

I have two types of "Computer" objects: Terminal Servers, and Laptops.

I have one type of user objects: "Company Users".

All users reside in the "Company Users" OU.
All terminal servers reside in the "Terminal Servers" OU.
All laptops reside in the "Laptops" OU.

Many of the users log onto both laptops and terminal servers. The problem is, I have very different policies (both computer configuration and user configuration) depending on whether a user logs onto a laptop or a terminal server. I thought that applying the entire policy to the computer-object OUs would work - but it only applies the "computer configuration" piece of the policy. The user configuration section of the policy is only applied if it is linked to the "Company Users" OU.

This presents the problem. I have no way of telling the domain to apply the laptop policy when the user is logging onto a laptop, and terminal servers when the user is logging onto a terminal server.

Any reason I can't apply a "User Configuration" policy to a computer object and have it apply to any user logging onto that computer? Am I doing something wrong, or is there a way I can work around this?

Thanks!

-ben

 

[porkchopexpress]

This is what you need to look at.

http://support.microsoft.com/?id=231287

 

[porkchopexpress]

http://www.microsoft.com/technet/pr...elp/abe2b1a9-975f-4b2f-b771-9e6a903e97db.mspx

 

[benace]

Thanks guys, that's exactly what I was looking for! Loopback processing did the trick.