I am watching the Group Policy class and had a question about how computer settings are applied. When I create a Group Policy and set a setting in the Computer configuration section do I have to add domain computer to the security filter or do all domain computer get those settings automatically. I usually add them but I did not know if it was necessary.
-
Group Policy question
-
If you're trying to limit the application of your computer settings, you add your group to the security filtering. If you do not, then it's not filtered.
-
Yep, computers are extensions of the user class, so the computer object will also be affected by the default 'Authenticated User' group that's on a new GPO. The real trick to remember when first learning is that computer settings apply to computer objects and user settings apply to user objects, so you must link to appropriate OUs with those types of objects in them depending on settings.
I -- unlike Don -- prefer to create policies that contain all related elements, rather than 1 or 2 settings per policy and having hundreds of them and I separate them by User or Computer, in this way focusing on Object Oriented designs like with programming. It can be a tad more difficult to troubleshoot, but you can usually quickly identify a guilty policy when you have a problem.
