koja grupna polisa ima prednost

[ gogi100 @ 17.06.2009. 09:29 ] @

Postavio sam na nivou domain-a gpo koja zakljucava taskbar korisnika i sprecava promenu podesavanja start menija i taskbara. jedan korisnik je zahtevao da mu se u quicklunch postavi firefox. domenska polisa blokira pristup. interesuje me da li ja mogu postaviti polisu na nivo ove radne stanice gde bih onemogucio lock taskbar-a. Koja polisa ima prednost? kako ovaj problem resiti a da ne menjam polisu koju sam promenio na nivou domaina?

Hvala

[ valjan @ 17.06.2009. 10:42 ] @

Evo sta kaze Microsoft:

Citat:

By default, Group Policy is inherited and cumulative, and it affects all computers and users in an Active Directory container.

GPOs are processed in the following order:

1. The local GPO is applied.
2. GPOs linked to sites are applied.
3. GPOs linked to domains are applied.
4. GPOs linked to organizational units are applied. For nested organizational units, GPOs linked to parent organizational units are applied before GPOs linked to child organizational units are applied.

Note The order in which GPOs are processed is significant because when policy is applied, it overwrites policy that was applied earlier.

By convention, computer-related policy settings override user-related policy settings.

Znaci, najjednostavniji nacin je da kreiras zaseban OU u koji ces smestiti tog korisnika, i nad tim OU primeniti kopiju domenske polise iz koje ces izbaciti zakljucavanje taskbara. Ako u buducnosti budes imao jos takvih korisnika kojma treba otkljucan taskbar, samo ih jednostavno prebacis u ovaj OU i to je to, a kad nekom treba ponovo da ga zakljucas, samo ga izbacis iz OU.