User settings not always apply.

[rweiss]

I have designed my AD environment so that I have desktop/servers/users/etc...in a separate OU. The problem is that if I set a GPO to a user, I don't want it to always apply.

If I log into a desktop, I want XYZ to happen, if I log into a server, I want ABC to happen.

Is there a way to accomplish this without security filtering?

Thanks

[jeremym]

You can use WMI filtering to give this a shot. There is a logon penality with regard to performance when you use WMI filters.. but that's the best way to approach the problem I think (based upon my understanding of your issue.)

[clausjj]

Take a loot at loopback-processing in replace mode, where you can have specific user settings apply when users log on to a computer/server which account is in the OU where you have set the loop-back processing.

You can read about loopback-processing in Jeremys book or take a look at: Loopback processing of Group Policy.

Regards
Claus Jacob Wordenskjold
www.chinchilladata.dk (in danish)