<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:p="urn:schemas-microsoft-com:office:powerpoint" xmlns:a="urn:schemas-microsoft-com:office:access" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:s="uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:rs="urn:schemas-microsoft-com:rowset" xmlns:z="#RowsetSchema" xmlns:b="urn:schemas-microsoft-com:office:publisher" xmlns:ss="urn:schemas-microsoft-com:office:spreadsheet" xmlns:c="urn:schemas-microsoft-com:office:component:spreadsheet" xmlns:odc="urn:schemas-microsoft-com:office:odc" xmlns:oa="urn:schemas-microsoft-com:office:activation" xmlns:html="http://www.w3.org/TR/REC-html40" xmlns:q="http://schemas.xmlsoap.org/soap/envelope/" xmlns:rtc="http://microsoft.com/officenet/conferencing" xmlns:D="DAV:" xmlns:Repl="http://schemas.microsoft.com/repl/" xmlns:mt="http://schemas.microsoft.com/sharepoint/soap/meetings/" xmlns:x2="http://schemas.microsoft.com/office/excel/2003/xml" xmlns:ppda="http://www.passport.com/NameSpace.xsd" xmlns:ois="http://schemas.microsoft.com/sharepoint/soap/ois/" xmlns:dir="http://schemas.microsoft.com/sharepoint/soap/directory/" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:dsp="http://schemas.microsoft.com/sharepoint/dsp" xmlns:udc="http://schemas.microsoft.com/data/udc" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:sub="http://schemas.microsoft.com/sharepoint/soap/2002/1/alerts/" xmlns:ec="http://www.w3.org/2001/04/xmlenc#" xmlns:sp="http://schemas.microsoft.com/sharepoint/" xmlns:sps="http://schemas.microsoft.com/sharepoint/soap/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:udcs="http://schemas.microsoft.com/data/udc/soap" xmlns:udcxf="http://schemas.microsoft.com/data/udc/xmlfile" xmlns:udcp2p="http://schemas.microsoft.com/data/udc/parttopart" xmlns:wf="http://schemas.microsoft.com/sharepoint/soap/workflow/" xmlns:dsss="http://schemas.microsoft.com/office/2006/digsig-setup" xmlns:dssi="http://schemas.microsoft.com/office/2006/digsig" xmlns:mdssi="http://schemas.openxmlformats.org/package/2006/digital-signature" xmlns:mver="http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mrels="http://schemas.openxmlformats.org/package/2006/relationships" xmlns:spwp="http://microsoft.com/sharepoint/webpartpages" xmlns:ex12t="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:ex12m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:pptsl="http://schemas.microsoft.com/sharepoint/soap/SlideLibrary/" xmlns:spsl="http://microsoft.com/webservices/SharePointPortalServer/PublishedLinksService" xmlns:Z="urn:schemas-microsoft-com:" xmlns:st="" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Comic Sans MS";
panose-1:3 15 7 2 3 3 2 2 2 4;}
@font-face
{font-family:"Trebuchet MS";
panose-1:2 11 6 3 2 2 2 2 2 4;}
@font-face
{font-family:"Rage Italic";
panose-1:3 7 5 2 4 5 7 7 3 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle23
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'>Well…scoping them correctly is implied. ;)<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Some shops do some pretty amazing AD design and OU’s I believe are not based <b>solely</b> for management of GPO’s. That’s the reason for Security Filtering as you have a static design of OU’s and objects, but need additional scoping options for fine tuning.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>With that said, if your AD design allows for it…scoping to OU’s is the easiest.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><p class=MsoNormal><b><span style='font-size:16.0pt;font-family:"Trebuchet MS","sans-serif";color:#31849B'>michael</span></b><b><span style='font-size:16.0pt;font-family:"Trebuchet MS","sans-serif";color:black'>|</span></b><b><span style='font-size:16.0pt;font-family:"Trebuchet MS","sans-serif";color:#76923C'>sainz</span></b><b><span style='font-size:16.0pt;font-family:"Trebuchet MS","sans-serif";color:#1F497D'><o:p></o:p></span></b></p><p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";color:#1F497D'>information technology coordinator | <a href="http://www.sunsetpres.org/"><span style='color:#1F497D'>sunset presbyterian church</span></a><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";color:#1F497D'><a href="mailto:michaelsainz@sunsetpres.org">michaelsainz@sunsetpres.org</a> | <a href="http://twitter.com/michaelsainz"><span style='color:#1F497D'>twitter.com/michaelsainz</span></a> | <a href="http://www.iamdigerati.com/"><span style='color:#1F497D'>Blog</span></a><o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";color:#1F497D'>"We listen to worship music, while the rest of the world listens to hip hop and pop. We talk about history, while the rest of the world talks about reality. We use bulletins, while the rest of the world is on Facebook."</span><span style='font-size:9.0pt;color:#1F497D'> -<b>Tony Morgan</b></span><span style='color:#1F497D'><o:p></o:p></span></p></div><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> discuss-bounces@itdiscuss.org [mailto:discuss-bounces@itdiscuss.org] <b>On Behalf Of </b>Bobby Stewart<br><b>Sent:</b> Thursday, November 19, 2009 10:04 AM<br><b>To:</b> IT Discussion Forum<br><b>Subject:</b> Re: [itdiscuss] Group policy statement<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='color:#1F497D'>Yes, you can but my experience with this is that it’s tedious and sometimes unpredictable (or at least not as easy to manage the results). We use the OU method with servers in their own OU separate from all other systems. We’ve done the same for systems that are portable (notebooks, tablets, etc.) vs. desktops, Windows XP vs. Vista vs. Win7 (at one time an issue for our antivirus automated deployment) as well as separating users in OUs for different policy applications. It’s a great tool!<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><p class=MsoNormal><span style='color:#1F497D'>Bobby Stewart<br>Network Analyst<br>Brentwood Baptist Church<br>Brentwood, TN<br><a href="http://WWW.BrentwoodBaptist.com">WWW.BrentwoodBaptist.com</a><br>(615) 324-6149 office<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>(615) 830-0012 cell<o:p></o:p></span></p></div><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> discuss-bounces@itdiscuss.org [mailto:discuss-bounces@itdiscuss.org] <b>On Behalf Of </b>Michael Sainz<br><b>Sent:</b> Thursday, November 19, 2009 11:50 AM<br><b>To:</b> IT Discussion Forum<br><b>Subject:</b> Re: [itdiscuss] Group policy statement<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='color:#1F497D'>You can scope your GPO’s appropriately using Security Filtering.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><p class=MsoNormal><b><span style='font-size:16.0pt;font-family:"Trebuchet MS","sans-serif";color:#31849B'>michael</span></b><b><span style='font-size:16.0pt;font-family:"Trebuchet MS","sans-serif";color:black'>|</span></b><b><span style='font-size:16.0pt;font-family:"Trebuchet MS","sans-serif";color:#76923C'>sainz</span></b><b><span style='font-size:16.0pt;font-family:"Trebuchet MS","sans-serif";color:#1F497D'><o:p></o:p></span></b></p><p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";color:#1F497D'>information technology coordinator | <a href="http://www.sunsetpres.org/"><span style='color:#1F497D'>sunset presbyterian church</span></a><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";color:#1F497D'><a href="mailto:michaelsainz@sunsetpres.org">michaelsainz@sunsetpres.org</a> | <a href="http://twitter.com/michaelsainz"><span style='color:#1F497D'>twitter.com/michaelsainz</span></a> | <a href="http://www.iamdigerati.com/"><span style='color:#1F497D'>Blog</span></a><o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";color:#1F497D'>"We listen to worship music, while the rest of the world listens to hip hop and pop. We talk about history, while the rest of the world talks about reality. We use bulletins, while the rest of the world is on Facebook."</span><span style='font-size:9.0pt;color:#1F497D'> -<b>Tony Morgan</b></span><span style='color:#1F497D'><o:p></o:p></span></p></div><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> discuss-bounces@itdiscuss.org [mailto:discuss-bounces@itdiscuss.org] <b>On Behalf Of </b>blloyd@buskercom.com<br><b>Sent:</b> Thursday, November 19, 2009 8:14 AM<br><b>To:</b> discuss@itdiscuss.org<br><b>Subject:</b> Re: [itdiscuss] Group policy statement<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='color:#1F497D'>Yep. Just setup the policy for the OU(s) that your workstations are in and make sure there aren’t any servers in the same OU(s). Keep in mind that you can link GPOs to more than one OU.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p> </o:p></span></p><p style='margin-bottom:12.0pt'><b><span style='font-size:14.0pt;color:navy'>Bill Lloyd</span></b><span style='color:navy'> </span><span style='font-size:11.0pt;color:navy'><br>IT Manager</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><img border=0 width=149 height=46 id="_x0000_i1025" src="cid:image001.jpg@01CA6901.392FFB10"><o:p></o:p></span></p><p><span style='font-size:11.0pt;color:black'>2567 Athens Hwy.<br>Gainesville, GA 30507<br>Phone: 770-417-1604 Ext.: 250<br>Fax: 770-417-1747<br>Cell: 404-379-6963</span><o:p></o:p></p><p><em><span style='font-size:11.0pt;color:navy'><a href="mailto:blloyd@buskercom.com"><span style='font-style:normal'>blloyd@buskercom.com</span></a></span></em><o:p></o:p></p><p class=MsoNormal><span style='font-size:7.0pt;font-family:"Arial","sans-serif";color:navy'>This email and any accompanying attachments may contain confidential and proprietary information. If you are not the intended recipient, you are requested to delete this entire communication immediately. Emails cannot be guaranteed to be secure or free of errors or viruses. The sender does not accept any liability or responsibility for any problems that may result from emails you receive.</span><o:p></o:p></p><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> discuss-bounces@itdiscuss.org [mailto:discuss-bounces@itdiscuss.org] <b>On Behalf Of </b>Steve Huffman<br><b>Sent:</b> Thursday, November 19, 2009 10:43 AM<br><b>To:</b> IT Discussion Forum<br><b>Subject:</b> [itdiscuss] Group policy statement<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Is there a way to force autoupdates on your workstations but exempt your servers in group policy? I don’t want my servers to reboot on their own <span style='font-family:Wingdings'>J</span><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-size:24.0pt;font-family:"Rage Italic"'>Steve<o:p></o:p></span></p><p class=MsoNormal><b><i><span style='font-size:10.0pt;font-family:"Comic Sans MS";color:gray'><o:p> </o:p></span></i></b></p><p class=MsoNormal><b><i><span style='font-size:10.0pt;font-family:"Comic Sans MS";color:gray'>Steve Huffman<o:p></o:p></span></i></b></p><p class=MsoNormal><b><i><span style='font-size:10.0pt;font-family:"Comic Sans MS";color:gray'>Network Administrator<o:p></o:p></span></i></b></p><p class=MsoNormal><b><i><span style='font-size:10.0pt;font-family:"Comic Sans MS";color:gray'>Blackhawk Church<o:p></o:p></span></i></b></p><p class=MsoNormal><b><i><span style='font-size:10.0pt;font-family:"Comic Sans MS";color:gray'><a href="mailto:shuffman@blackhawkchurch.org">shuffman@blackhawkchurch.org</a><o:p></o:p></span></i></b></p><p class=MsoNormal><b><i><span style='font-size:10.0pt;font-family:"Comic Sans MS";color:gray'><a href="http://www.BlackhawkChurch.org">www.BlackhawkChurch.org</a> <o:p></o:p></span></i></b></p><p class=MsoNormal><b><i><span style='font-size:10.0pt;font-family:"Comic Sans MS";color:gray'>608.828.4200<o:p></o:p></span></i></b></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>