Home

Results 1 to 4 of 4

Thread: Multiple GPO

  1. #1
    Join Date
    Feb 2016
    Posts
    2

    Multiple GPO

    I am new to ZEN and I am running into an issue that I cannot find the answer for. I created dynamic workstation groups around subnets for different sites. I attached a GPO to this level. Its main purpose was to block windows update and access to windows update in order to roll out patch management. I created workstation groups and tried to implement GPO that was much more strict basically to remove students access to manipulate the desktop, among other things, in computer labs. So my problem is that the computer lab PCs have a GPO at a dynamic workstation level and when the workstation group GPO is applied, it states successful but the policies are not reflected on the PC. I thought that policies were on a tiered structure that followed dynamic workstation group>workstation group>workstation. Any suggestions on how to enforce that GPO at the workstation group level?

    Thanks in advance,
    Chris

  2. #2
    Join Date
    Feb 2008
    Location
    Raleigh, NC
    Posts
    6,661

    Re: Multiple GPO

    The Approach I tend to recommend for schools is to assign a very strong default GPO to all devices.
    Then assign less restrictive GPOs to Teacher and Tech Accounts to unlock them.

    It would also be possible to use System Requirements on Policies so that they only applied if certain criteria are met.
    --
    Any Opinions, Thoughts, Solutions, or Blog Entries are my own and may or may not be shared by Micro Focus or any Sane Person
    Please Use at your Own Risk.

    Blog - https://forums.novell.com/blog.php/5830-CRAIGDWILSON

    https://ideas.microfocus.com/mfi/novell-zcm

    Want to Turbo charge your apps and put an end to compatability issues?
    https://www.microfocus.com/products/...top-containers

  3. #3
    Join Date
    Feb 2016
    Posts
    2

    Re: Multiple GPO

    The lab devices have multiple group polices. The more strict policy is assigned at a workstation group level and it is not actually applying to the devices. The generic GPO is assigned to a dynamic workstation group and that is what the lab PCs are using. Was my belief of dynamic workstation group>workstation group>workstation correct? Can I assign multiple GPOs like that?

  4. #4
    Join Date
    Feb 2008
    Location
    Raleigh, NC
    Posts
    6,661

    Re: Multiple GPO

    Quote Originally Posted by chwolfe View Post
    I am new to ZEN and I am running into an issue that I cannot find the answer for. I created dynamic workstation groups around subnets for different sites. I attached a GPO to this level. Its main purpose was to block windows update and access to windows update in order to roll out patch management. I created workstation groups and tried to implement GPO that was much more strict basically to remove students access to manipulate the desktop, among other things, in computer labs. So my problem is that the computer lab PCs have a GPO at a dynamic workstation level and when the workstation group GPO is applied, it states successful but the policies are not reflected on the PC. I thought that policies were on a tiered structure that followed dynamic workstation group>workstation group>workstation. Any suggestions on how to enforce that GPO at the workstation group level?

    Thanks in advance,
    Chris
    No, Dynamic Workstation Groups do not have a lower weight than standard groups.
    Use of System Requirements would work better to filter out undesired GPOs.
    The same process to create Dynamic Groups can create filterable values on the device for the GPOs.
    --
    Any Opinions, Thoughts, Solutions, or Blog Entries are my own and may or may not be shared by Micro Focus or any Sane Person
    Please Use at your Own Risk.

    Blog - https://forums.novell.com/blog.php/5830-CRAIGDWILSON

    https://ideas.microfocus.com/mfi/novell-zcm

    Want to Turbo charge your apps and put an end to compatability issues?
    https://www.microfocus.com/products/...top-containers

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •