Security Filtering
Filtering let you choose
the user, group or computer that the GPO
will apply onto. If you configured
"Computers" OU with a GPO but you only
want to configure Win XP stations with
that GPO and exclude Win 2000 stations,
you can easily create a group of Win XP
computers and apply the GPO only to that
group.
This option save you from
creating complicated OU tree with each
type of computer in it.
A user or a group that
you configure in the filtering field
have by default the "Read" and "Apply"
permission. By default when you create a
GPO link, you can see that
"Authenticated users" are listed.
In the above example,
Office 2K3 will be installed on all
computers that are part of the two
listed groups.
If we still were using
Authenticated users, the installation of
the Office suite could have followed the
user to any computer that he logs onto,
like servers or other machines. Using
filtering narrows the installation
options.
If you want to configure
these permissions with higher
resolution, you can go to Delegation tab
and see the permissions. Going to the
Advanced Tab will let you configure the
ACL permission with the highest
resolution. |
