The GPTalk Mailing List

The GPTALK mailing list is where you can send and receive email related to Windows Group Policy. You must subscribe to the list to send and receive mail from the list. The purpose of the list is to provide a forum for asking and answering technical questions related to Group Policy. Any question is fair game as long as it is related to Windows Group Policy. The Archives for this list can be found on this page.

List Posts

Unanswered Active Topics

Forums Search

Forums >GPTalk >GPTalk Mailing List

Subject: [gptalk] Cross-Domain Policy Assignments - how to?

Prev Next

You are not authorized to post a reply.

Author

Messages

DamianCrosby User is Offline

Posts:25

04/08/2010 11:44 AM
Hi, What happens / what's best practice? For example I have a user in domain a that will log into machines in domain b (trusted , part of the same forest) with their domain a account (obviously). How will this impact policy processing order in the following scenarios 1. The policy is deployed natively in domain a and domain b with the same settings 2. The policy is linked cross domain from domain b to domain a Thanks. Damian. -------------------------------------------------------------------------- NOTICE: If received in error, please destroy, and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error. We may monitor and store emails to the extent permitted by applicable law.

jeromelcruz User is Offline

Posts:120

04/08/2010 9:56 PM
Device in a different domain, but the same forest: As long as the device in domain 'b' does NOT have user Loopback mode policy processing on, the device will receive it's normal machine policies from domain 'b' and the user will receive the policies for their user account from domain 'a'. Cross-linking polices across domains is generally something to avoid. Jerry Cruz \| Group Policies Product Manager \| Windows Server and Infrastructure Architecture From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Crosby, Damian Sent: Thursday, April 08, 2010 3:11 AM To: xxxxxxxxxxxxxxxx Subject: [gptalk] Cross-Domain Policy Assignments - how to? Hi, What happens / what's best practice? For example I have a user in domain a that will log into machines in domain b (trusted , part of the same forest) with their domain a account (obviously). How will this impact policy processing order in the following scenarios 1. The policy is deployed natively in domain a and domain b with the same settings 2. The policy is linked cross domain from domain b to domain a Thanks. Damian. ________________________________ NOTICE: If received in error, please destroy, and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error. We may monitor and store emails to the extent permitted by applicable law.

You are not authorized to post a reply.

Forums >GPTalk >GPTalk Mailing List > [gptalk] Cross-Domain Policy Assignments - how to?

ActiveForums 3.7

Ads

The GPTalk Mailing List

List Posts

Members

Ads