Computer configuration vs User configuration

[beterzo03]

Hey,

Just a quick newbie question:

If I want to disable/enable some policy under Computer config, do I set the GPO on the OU containing the PC's, or can it be used with GPO's linked to users aswell?
In this case, I want users to be able to eject the usb devices, which is not possible, because Right-Click etc is disabled.

[romath]

If you set a policy under Computer Config, and there are no computers in that OU, it won't have any effect.

You can set both Computer and User settings in the same GPO. I personally keep them separate for easier troubleshooting if need be.

Hope this helps!

[beterzo03]

If you set a policy under Computer Config, and there are no computers in that OU, it won't have any effect.

You can set both Computer and User settings in the same GPO. I personally keep them separate for easier troubleshooting if need be.

Hope this helps!

Right,

I got one OU for these pc's, and one OU for these users.
So I can do the user thingies in the user OU/GPO and the computer thingies in the PC OU/GPO ?

[romath]

You bet!

If you've completely segregated your users and PCs into seperate OUs, you can create seperate GPOS. Then assign them to the applicable OU. You can also disable the non-applicable half of the GPO.

I.e. If the GPO is for user settings, you can disable the Computer half. It will speed up the processing of the GPO a bit.