3 Comments

1. 

   John Goldin on April 19, 2011 at 7:23 pm

   I attended the AADUG meeting the other night and enjoyed your presentation. I am trying one of your suggestions using Set-GPPermissions. Here is what I did.

   Set-GPPermissions -Name “empty” -PermissionLevel None -TargetName “Authenticated Users” -TargetType “Group” -Replace

   I got an error stating:
   Set-GPPermissions : There is no such object on the server

   Next I did:
   Get-GPPermissions -Name “empty” -All
   I got information about the permissions set on the “empty” gpo and Authenticated Users was on the list.

   Trustee: Authenticated Users
   TrusteeType: WellKnownGroup
   Premission: GPOApply
   Inherited: False

   Do I have a syntax error some where?

   Thanks for your help,
   John Goldin

   Reply
2. 

   Mike on April 25, 2011 at 10:51 pm

   I’m attempting to setup a GPO and apply it to a pc on our domain. We’re running Server 2003 in a XP environment. I basically want to lockdown the pc to all users expect Admin’s. I’ve been able to apply GPO to user accounts but I want to only affect the pc that users logon to. I can’t seem to get that to work. Your help would be appreciated.

   Reply
3. 

   Michael Kerrick on April 28, 2011 at 11:22 am

   I’m hoping you can straighten out a little confusion we are having. I have read and been told that installing SP3 on XP and SP2 on Server 2003 R2 installs the necessary structures to allow them to process Group Preferences. But some of our testing, and other documentation I have read, implies this is not true.

   I haven’t setup a full blown test yet, but I thought I would get a little guidance from you before I invest alot of time on this.

   Thank you,

   Michael

   Reply