- Posts: 783
- Thank you received: 0
Selectively Disable Group Policy
- skepticals
- Topic Author
- Offline
- Elite Member
Less
More
17 years 3 months ago #22618
by skepticals
Selectively Disable Group Policy was created by skepticals
I am using Group Policy to lock down a group of lab computers. I use both computer and user policies. Each computer in the lab is logging in under the same username. Is there a way to stop specific computers from having the settings applied even if they are logged in under said username?
The reason I ask, is there are changes that I need to make to some machines and they require that I log into the normal lab login, but I do not want to lift the restrictions because the rest of the computers still need to be in use.
If not, I will always have to make changes after hours. Any thoughts?
The reason I ask, is there are changes that I need to make to some machines and they require that I log into the normal lab login, but I do not want to lift the restrictions because the rest of the computers still need to be in use.
If not, I will always have to make changes after hours. Any thoughts?
17 years 3 months ago #22619
by KiLLaBeE
Well, wouldn't that defeat the purpose of "securing the machines" if on some specific computers the settings aren't applied (assuming that the test users will also have access to those computers)?
If your main objective is to be able to edit the machines when you want but not be restricted yourself, how about this option: Setup a client-server lab network, setup the user account to be used and place that user account in an organizational unit, then apply the policies that lock down that account to that OU. Then, whenever that account is used to login to the comp, those restrictive policies are applied, but when you login to any comp, the settings aren't applied, and if you want to make changes to the policy, you could do so on the server.
What are your thoughts?
N
Replied by KiLLaBeE on topic Re: Selectively Disable Group Policy
Is there a way to stop specific computers from having the settings applied even if they are logged in under said username?
Well, wouldn't that defeat the purpose of "securing the machines" if on some specific computers the settings aren't applied (assuming that the test users will also have access to those computers)?
If your main objective is to be able to edit the machines when you want but not be restricted yourself, how about this option: Setup a client-server lab network, setup the user account to be used and place that user account in an organizational unit, then apply the policies that lock down that account to that OU. Then, whenever that account is used to login to the comp, those restrictive policies are applied, but when you login to any comp, the settings aren't applied, and if you want to make changes to the policy, you could do so on the server.
What are your thoughts?
N
- skepticals
- Topic Author
- Offline
- Elite Member
Less
More
- Posts: 783
- Thank you received: 0
17 years 3 months ago #22635
by skepticals
Replied by skepticals on topic Re: Selectively Disable Group Policy
Well, that is how it is currently setup; however, there are times that I need to change settings as that user. The changes will not take effect while logged in as Admin, for instance. The problem is, I want to make the changes during the day while the computers are in use. It sounds like this is not possible?
Time to create page: 0.117 seconds