jseber1982
Enterprise SCCM\SCOM
- Messages
- 904
- Location
- Atlanta, Ga
Ok i have a 2003 domain. I am trying to make it so that a group of users can only access a certain group of pcs. I want it so that whenever i bring a new group of pcs in, i dont have to make another policy for each one. So what i did was, I made a domain policy to deny the "training" users logon rights to the entire domain. I did not make this enforced. I Then made a gpo right above the training computers to allow logon, i enforced this. For some reason the training users are still getting denied. I know that on gpos, if there is a permissions conflict, the enforced one will allways take over, thats why i dont get why it isnt working.
any help, thanks
any help, thanks