Ignoring group policy when logging onto certain servers

Thanks for the replies and links! It's much appreciated.

The servers in question are not terminal servers. When a user logs in I dont
want, for example, printers being added or data from their profiles copied to
the specific server they are accessing.

The loopback processing sounds promising, I'll try it out.



"Jorge Silva" wrote:

> Hi
> http://support.microsoft.com/kb/231287
> http://support.microsoft.com/kb/260370
>
>
> --
>
> I hope that the information above helps you.
> Have a Nice day.
>
> Jorge Silva
> MVP Directory Services
>
> Please no e-mails, any questions should be posted in the NewsGroup
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>
>
> "Mehdis" <Mehdis@discussions.microsoft.com> wrote in message
> news:5E9A636E-D71A-4B96-AC9E-773AEEA81BF1@microsoft.com...
> > Hi,
> >
> > I am wondering if there is a way to prevent group policy settings from
> > being
> > applied when a domain user logs on to certain servers.....is this
> > possible?
> >
> > Any advice or suggestions would be greatly appreciated.
> >
> > Many thanks
> >

Loopback may be want you want, but normally this is used to apply additional
policies not remove policies already applied.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Mehdis" <Mehdis@discussions.microsoft.com> wrote in message
news:8FC79FA4-C48B-410F-B023-E1CA39BA613D@microsoft.com...
> Thanks for the replies and links! It's much appreciated.
>
> The servers in question are not terminal servers. When a user logs in I
> dont
> want, for example, printers being added or data from their profiles copied
> to
> the specific server they are accessing.
>
> The loopback processing sounds promising, I'll try it out.
>
>
>
> "Jorge Silva" wrote:
>
>> Hi
>> http://support.microsoft.com/kb/231287
>> http://support.microsoft.com/kb/260370
>>
>>
>> --
>>
>> I hope that the information above helps you.
>> Have a Nice day.
>>
>> Jorge Silva
>> MVP Directory Services
>>
>> Please no e-mails, any questions should be posted in the NewsGroup
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>>
>>
>>
>> "Mehdis" <Mehdis@discussions.microsoft.com> wrote in message
>> news:5E9A636E-D71A-4B96-AC9E-773AEEA81BF1@microsoft.com...
>> > Hi,
>> >
>> > I am wondering if there is a way to prevent group policy settings from
>> > being
>> > applied when a domain user logs on to certain servers.....is this
>> > possible?
>> >
>> > Any advice or suggestions would be greatly appreciated.
>> >
>> > Many thanks
>> >

Thanks. You're right. I tried it yesterday but it didn't do what I wanted.
I'm looking into some of the other articles given now.

"Paul Bergson [MVP-DS]" wrote:

> Loopback may be want you want, but normally this is used to apply additional
> policies not remove policies already applied.
>
> --
> Paul Bergson
> MVP - Directory Services
> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
> 2008, 2003, 2000 (Early Achiever), NT4
> Microsoft's Thrive IT Pro of the Month - June 2009
>
> http://www.pbbergs.com
>
> Please no e-mails, any questions should be posted in the NewsGroup This
> posting is provided "AS IS" with no warranties, and confers no rights.
>
> "Mehdis" <Mehdis@discussions.microsoft.com> wrote in message
> news:8FC79FA4-C48B-410F-B023-E1CA39BA613D@microsoft.com...
> > Thanks for the replies and links! It's much appreciated.
> >
> > The servers in question are not terminal servers. When a user logs in I
> > dont
> > want, for example, printers being added or data from their profiles copied
> > to
> > the specific server they are accessing.
> >
> > The loopback processing sounds promising, I'll try it out.
> >
> >
> >
> > "Jorge Silva" wrote:
> >
> >> Hi
> >> http://support.microsoft.com/kb/231287
> >> http://support.microsoft.com/kb/260370
> >>
> >>
> >> --
> >>
> >> I hope that the information above helps you.
> >> Have a Nice day.
> >>
> >> Jorge Silva
> >> MVP Directory Services
> >>
> >> Please no e-mails, any questions should be posted in the NewsGroup
> >> This posting is provided "AS IS" with no warranties, and confers no
> >> rights.
> >>
> >>
> >>
> >>
> >> "Mehdis" <Mehdis@discussions.microsoft.com> wrote in message
> >> news:5E9A636E-D71A-4B96-AC9E-773AEEA81BF1@microsoft.com...
> >> > Hi,
> >> >
> >> > I am wondering if there is a way to prevent group policy settings from
> >> > being
> >> > applied when a domain user logs on to certain servers.....is this
> >> > possible?
> >> >
> >> > Any advice or suggestions would be greatly appreciated.
> >> >
> >> > Many thanks
> >> >
>
>
> .
>

You would have to make sure this loopback policy has a higher priority and
reset any policies back to what earlier policies would have.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Mehdis" <Mehdis@discussions.microsoft.com> wrote in message
news:5EC69DAE-0EA5-4D52-B54C-297CF39F52FC@microsoft.com...
> Thanks. You're right. I tried it yesterday but it didn't do what I wanted.
> I'm looking into some of the other articles given now.
>
> "Paul Bergson [MVP-DS]" wrote:
>
>> Loopback may be want you want, but normally this is used to apply
>> additional
>> policies not remove policies already applied.
>>
>> --
>> Paul Bergson
>> MVP - Directory Services
>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>> 2008, 2003, 2000 (Early Achiever), NT4
>> Microsoft's Thrive IT Pro of the Month - June 2009
>>
>> http://www.pbbergs.com
>>
>> Please no e-mails, any questions should be posted in the NewsGroup This
>> posting is provided "AS IS" with no warranties, and confers no rights.
>>
>> "Mehdis" <Mehdis@discussions.microsoft.com> wrote in message
>> news:8FC79FA4-C48B-410F-B023-E1CA39BA613D@microsoft.com...
>> > Thanks for the replies and links! It's much appreciated.
>> >
>> > The servers in question are not terminal servers. When a user logs in I
>> > dont
>> > want, for example, printers being added or data from their profiles
>> > copied
>> > to
>> > the specific server they are accessing.
>> >
>> > The loopback processing sounds promising, I'll try it out.
>> >
>> >
>> >
>> > "Jorge Silva" wrote:
>> >
>> >> Hi
>> >> http://support.microsoft.com/kb/231287
>> >> http://support.microsoft.com/kb/260370
>> >>
>> >>
>> >> --
>> >>
>> >> I hope that the information above helps you.
>> >> Have a Nice day.
>> >>
>> >> Jorge Silva
>> >> MVP Directory Services
>> >>
>> >> Please no e-mails, any questions should be posted in the NewsGroup
>> >> This posting is provided "AS IS" with no warranties, and confers no
>> >> rights.
>> >>
>> >>
>> >>
>> >>
>> >> "Mehdis" <Mehdis@discussions.microsoft.com> wrote in message
>> >> news:5E9A636E-D71A-4B96-AC9E-773AEEA81BF1@microsoft.com...
>> >> > Hi,
>> >> >
>> >> > I am wondering if there is a way to prevent group policy settings
>> >> > from
>> >> > being
>> >> > applied when a domain user logs on to certain servers.....is this
>> >> > possible?
>> >> >
>> >> > Any advice or suggestions would be greatly appreciated.
>> >> >
>> >> > Many thanks
>> >> >
>>
>>
>> .
>>

Loopback does both, it adds and also removes if necessary

--

I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MVP Directory Services

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.




"Mehdis" <Mehdis@discussions.microsoft.com> wrote in message
news:5EC69DAE-0EA5-4D52-B54C-297CF39F52FC@microsoft.com...
> Thanks. You're right. I tried it yesterday but it didn't do what I wanted.
> I'm looking into some of the other articles given now.
>
> "Paul Bergson [MVP-DS]" wrote:
>
>> Loopback may be want you want, but normally this is used to apply
>> additional
>> policies not remove policies already applied.
>>
>> --
>> Paul Bergson
>> MVP - Directory Services
>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>> 2008, 2003, 2000 (Early Achiever), NT4
>> Microsoft's Thrive IT Pro of the Month - June 2009
>>
>> http://www.pbbergs.com
>>
>> Please no e-mails, any questions should be posted in the NewsGroup This
>> posting is provided "AS IS" with no warranties, and confers no rights.
>>
>> "Mehdis" <Mehdis@discussions.microsoft.com> wrote in message
>> news:8FC79FA4-C48B-410F-B023-E1CA39BA613D@microsoft.com...
>> > Thanks for the replies and links! It's much appreciated.
>> >
>> > The servers in question are not terminal servers. When a user logs in I
>> > dont
>> > want, for example, printers being added or data from their profiles
>> > copied
>> > to
>> > the specific server they are accessing.
>> >
>> > The loopback processing sounds promising, I'll try it out.
>> >
>> >
>> >
>> > "Jorge Silva" wrote:
>> >
>> >> Hi
>> >> http://support.microsoft.com/kb/231287
>> >> http://support.microsoft.com/kb/260370
>> >>
>> >>
>> >> --
>> >>
>> >> I hope that the information above helps you.
>> >> Have a Nice day.
>> >>
>> >> Jorge Silva
>> >> MVP Directory Services
>> >>
>> >> Please no e-mails, any questions should be posted in the NewsGroup
>> >> This posting is provided "AS IS" with no warranties, and confers no
>> >> rights.
>> >>
>> >>
>> >>
>> >>
>> >> "Mehdis" <Mehdis@discussions.microsoft.com> wrote in message
>> >> news:5E9A636E-D71A-4B96-AC9E-773AEEA81BF1@microsoft.com...
>> >> > Hi,
>> >> >
>> >> > I am wondering if there is a way to prevent group policy settings
>> >> > from
>> >> > being
>> >> > applied when a domain user logs on to certain servers.....is this
>> >> > possible?
>> >> >
>> >> > Any advice or suggestions would be greatly appreciated.
>> >> >
>> >> > Many thanks
>> >> >
>>
>>
>> .
>>

How does it remove? Other than if you reverse a setting.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Jorge Silva" <jorgesilva_pt@hotmail.com> wrote in message
news:336301CE-282C-43C2-BA4A-9B26CB71FF6D@microsoft.com...
> Loopback does both, it adds and also removes if necessary
>
> --
>
> I hope that the information above helps you.
> Have a Nice day.
>
> Jorge Silva
> MVP Directory Services
>
> Please no e-mails, any questions should be posted in the NewsGroup
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
>
>
>
> "Mehdis" <Mehdis@discussions.microsoft.com> wrote in message
> news:5EC69DAE-0EA5-4D52-B54C-297CF39F52FC@microsoft.com...
>> Thanks. You're right. I tried it yesterday but it didn't do what I
>> wanted.
>> I'm looking into some of the other articles given now.
>>
>> "Paul Bergson [MVP-DS]" wrote:
>>
>>> Loopback may be want you want, but normally this is used to apply
>>> additional
>>> policies not remove policies already applied.
>>>
>>> --
>>> Paul Bergson
>>> MVP - Directory Services
>>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>>> 2008, 2003, 2000 (Early Achiever), NT4
>>> Microsoft's Thrive IT Pro of the Month - June 2009
>>>
>>> http://www.pbbergs.com
>>>
>>> Please no e-mails, any questions should be posted in the NewsGroup This
>>> posting is provided "AS IS" with no warranties, and confers no rights.
>>>
>>> "Mehdis" <Mehdis@discussions.microsoft.com> wrote in message
>>> news:8FC79FA4-C48B-410F-B023-E1CA39BA613D@microsoft.com...
>>> > Thanks for the replies and links! It's much appreciated.
>>> >
>>> > The servers in question are not terminal servers. When a user logs in
>>> > I
>>> > dont
>>> > want, for example, printers being added or data from their profiles
>>> > copied
>>> > to
>>> > the specific server they are accessing.
>>> >
>>> > The loopback processing sounds promising, I'll try it out.
>>> >
>>> >
>>> >
>>> > "Jorge Silva" wrote:
>>> >
>>> >> Hi
>>> >> http://support.microsoft.com/kb/231287
>>> >> http://support.microsoft.com/kb/260370
>>> >>
>>> >>
>>> >> --
>>> >>
>>> >> I hope that the information above helps you.
>>> >> Have a Nice day.
>>> >>
>>> >> Jorge Silva
>>> >> MVP Directory Services
>>> >>
>>> >> Please no e-mails, any questions should be posted in the NewsGroup
>>> >> This posting is provided "AS IS" with no warranties, and confers no
>>> >> rights.
>>> >>
>>> >>
>>> >>
>>> >>
>>> >> "Mehdis" <Mehdis@discussions.microsoft.com> wrote in message
>>> >> news:5E9A636E-D71A-4B96-AC9E-773AEEA81BF1@microsoft.com...
>>> >> > Hi,
>>> >> >
>>> >> > I am wondering if there is a way to prevent group policy settings
>>> >> > from
>>> >> > being
>>> >> > applied when a domain user logs on to certain servers.....is this
>>> >> > possible?
>>> >> >
>>> >> > Any advice or suggestions would be greatly appreciated.
>>> >> >
>>> >> > Many thanks
>>> >> >
>>>
>>>
>>> .
>>>

"Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
news:e0%23TKyRlKHA.5608@TK2MSFTNGP05.phx.gbl...
> How does it remove? Other than if you reverse a setting.
>

That's what I would think, if there is a conflicting setting it will change
it, but if it's left a Default, it won't. I usually teach my students that
the Default or "Not Configured" is the same as thinking of it as "I don't
care." So if a GPO setting above it sets it, but the next one that fires is
set to default, the previous GPO's setting remains. The only way to change
it to default is to disable it.


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE &
MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services

If you feel this is an urgent issue and require immediate assistance, please
contact Microsoft PSS directly. Please check http://support.microsoft.com
for regional support phone numbers.

Correct, I was referring to conflicting settings. Each GPO and depending of
their hierarchy has the capability of removing/ override other
configuration settings, Loopback is no different.
--

I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MVP Directory Services

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.




"Ace Fekay [MVP-DS, MCT]" <aceman@mvps.RemoveThisPart.org> wrote in message
news:#o8Gz4RlKHA.5820@TK2MSFTNGP06.phx.gbl...
> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
> news:e0%23TKyRlKHA.5608@TK2MSFTNGP05.phx.gbl...
>> How does it remove? Other than if you reverse a setting.
>>
>
> That's what I would think, if there is a conflicting setting it will
> change it, but if it's left a Default, it won't. I usually teach my
> students that the Default or "Not Configured" is the same as thinking of
> it as "I don't care." So if a GPO setting above it sets it, but the next
> one that fires is set to default, the previous GPO's setting remains. The
> only way to change it to default is to disable it.
>
>
> --
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Please reply back to the newsgroup or forum for collaboration benefit
> among responding engineers, and to help others benefit from your
> resolution.
>
> Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE &
> MCSA 2003/2000, MCSA Messaging 2003
> Microsoft Certified Trainer
> Microsoft MVP - Directory Services
>
> If you feel this is an urgent issue and require immediate assistance,
> please contact Microsoft PSS directly. Please check
> http://support.microsoft.com for regional support phone numbers.
>
>
>

"Jorge Silva" <jorgesilva_pt@hotmail.com> wrote in message
news:84F343D3-2801-48A0-87E0-CF96BE369208@microsoft.com...
> Correct, I was referring to conflicting settings. Each GPO and depending
> of their hierarchy has the capability of removing/ override other
> configuration settings, Loopback is no different.
> --
>
> I hope that the information above helps you.
> Have a Nice day.
>
> Jorge Silva
> MVP Directory Services
>
> Please no e-mails, any questions should be posted in the NewsGroup
> This posting is provided "AS IS" with no warranties, and confers no
> rights.

Good way to put it. :-)

Ace