GPO Filtering for a user of computer settings.

I have defined a GPO with only the computer settings and I would like to exclude a particular user from this GPO, can I achieve this with GPO filtering?

> I have computer settings defined in the GPO which disables removable
> storage. Now I would like to exclude this policy for a particular user
> rather than the computer. Is it possible?
No. If you want to exclude users, you have to disable removable storage
in the user part of your GPOs...
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Similar Messages

Connect to a cube with Integrated WIndows Sercurity for Windows user with computer outside the domain

Hello,I am trying to connect to an MSSAS cube with a windows user ( and i need this user to be the end user that connect to the cube) from outside the domain.It will be .Net application.I use msmdpump.dll before but the thing is it impersonate the connection
so the user that connect to the Cube is not the real client user with is a problem for me because i like to manage the security throw roles.
SSRS is able to do what i am trying to achieve ( it ask you your domain user and password) then connect to the cube with these credential which is great,but i do that ?
With ADOMD.Net how do you provide windows user/password in the connection string ?
I tryed to only active windows security access with IIS and MSSAS but it's not working with a computer outside the domain even if in excel i provide a windows user/password.
Vincent

With ADOMD.Net how do you provide windows user/password in the connection string ?
Hello Vincent,
See MSDN Connection String Properties (Analysis Services) for all available properties; addtitional: AdomdConnection.ConnectionString
Property =>
Olaf Helper
[ Blog] [ Xing] [ MVP]

How to make signature field work for reader users? Security settings change when doc is extended???

I've been struggling to correct a problem all week and am at my wits end. Customer service was no help as the person I spoke with could barely speak english let alone understand the problem as I explained it to him. Hoping someone here can provide some insight, here's the issue:
I'm using a Windows 7 Professional OS. I created a Microsoft Word doc and used Adobe Acrobat XI Standard to create a form from it. It automatically detected the fields, which includes a signature field. I went through fixed it all up how it needed to be and did "save as other - reader extended pdf - enable forms fill in & save in reader".
The document is a report that will be sent to a small number of people that have to fill it out, digitally sign and return and I'm assuming that most if not all of them will open the document using the free Adobe Reader. So I thought extending it is what I needed to do to make sure they could fill it out, save it to their computer if need be, and also sign digitally. The signature field was automatically added in by acrobat for me and I did not change the properties of it at all except to add a border.
When I open the form in Reader (also XI) I can fill out all the fields, save it... but not sign it. The security settings say signing is not allowed even though I went back to the original pdf form and the security settings on it say allowed for everything. I don't know how to fix this... please help!!!
I've attached some screen shots but can include more if needed...

I don't have the Enable More Tools option under Reader Extended PDF. I just tried to download the XI Pro trial version and it won't complete installation because of the standard version I already have. Any advice or workarounds you know of? Going to the boss for $$ to upgrade to Pro is what I'll consider my last resort if the issue is truly that I have to use Pro to enable more tools for reader.... I appreciate your reply though. I sat here all day yesterday fingers crossed that SOMEONE would give it a go!

MDM Catalog - records filtering for different users

Dear Experts
We all know that there are two ways of restricting users from seeing all the catalog records - Masks and Named Searches.
In a scenario where I'll have say, 100 users, who'll see 100 different subsets of catalog records, will i have to create 100 webservice configurations? Is there an alternate route?
P.S: Posted the question in SRM forums, since there wasnt any response I'm posting it here.
Thanks
SwarnaDeepika

Hi Swarna,
No you don't need to create multiple roles or multiple webservices. Only one webservice can be configured to Work and fulfill your requirement. But definitely you will need to create multiple masks/named searches (*depending up on your requirement)
You can try below solution to acheive your requirement:
1. Create Masks/ Named searches as per your requirement.
2. Create a custom table in SRM. Maintain mapping between User (or org level) to Mask/Named Search in this custom table.
3. Define one web service in SRM system for your catalog.
4. Populate Named Searches/mask Parameter dunamically at the runtime using the custom table. You will have to implement BADI in SRM to do so... Unfortunately I don't recall the BADI name at the moment and neither do have SRM system to check. But you can easily find the BADI to implement by following the below mentioned SPRO path in SRM system:
Supplier Relationship Management => SRM Server => Business Add-Ins (BAdIs) => External Web Services (Catalogs, Vendor Lists etc.) => Transfer Additional Parameters.
Please revert with the result...
Regards,
Shiv

This connection is untrusted with (Error code: sec_error_unknown_issuer) received for one user on computer on various https connections, same sites accessible by other users

Windows 7. Firefox 9.0.1. Receiving above error on various sites which I have used succesfully before and which I can still use if I log on as a different user on this pc.

Fixed by deleting cert8.db on profile directory.

Is there any plan to update the Creative Cloud EULA for single user, multiple computer use?

I have a Mac and a PC at work and 5 machines at home (Macs and PCs) in different rooms. I would like to be able to use the software whenever creativity strikes. Otherwise I am forced to keep using Gimp and other solutions at home.

At the moment if you want to have the Adobe Creative offerings available on 5 different computers then you would want to look at the Creative Cloud for Teams offering. You can find more details at http://www.adobe.com/products/creativecloud/teams.html.
You may also want to review http://forums.adobe.com/message/4379859#4379859?tstart=0http: which discusses this topic in some detail.

How to set the same General settings for all users

Hi Experts,
How can i set the same general settings for all users e.g. marking the checkbox "Display header" to true for all users? General settings are possible under User Settings Button.
Regards,
Arti.

Hi Arti!
You can default user settings in a PFCG role, in the "personalization" tab.
If you have a PFCG role that is common to all your users, you can set the default values here.
However it does not prevent them to change these settings later, except if you modify the "user settings" fields properties in cProjects application.
Matthias

How to make saved IR available for all users

Hi,
I've created IR and saved it to several tabs based on search conditions.
But they're only visible for developers.
How to make these tabs available for all end-users ?
Does version 4.0 support this option ?
Thank you!

Hi
At present this feature is not included, although I believe it may be in 4.0. Many people have provided workarounds for this. None of which I have tried. I cannot find the original thread but here is a solution from a chap called Ruud
>
One way to share your saved reports with others is to 'Publish' your report settings to a few intermediate tables in your application and have other users 'Import' your settings from there. The reason for using intermediate tables is so that not all your saved reports need to be 'visible' to other users (only those that you've chosen to publish).
Basically you have available the following views and package calls that any APEX user can access:-
- flows_030100.apex_application_pages (all application pages)
- flows_030100.apex_application_page_ir_rpt (all saved reports - inclusing defaults and all user saved reports)
- flows_030100.apex_application_page_ir_cond (the associated conditions/filters for above saved reports)
- wwv_flow_api.create_worksheet_rpt (package procedure that creates a new saved report)
- wwv_flow_api.create_worksheet_condition (package procedure that creates a condition/filter for above saved report)
The way I've done it is that I've created 2 tables in my application schema that are straightforward clones of the 2 above views.
CREATE TABLE user_report_settings AS SELECT * FROM flows_030100.apex_application_page_ir_rpt;
CREATE TABLE user_report_conditions AS SELECT * FROM flows_030100.apex_application_page_ir_cond;
( NB. I deleted any contents that may have come across to make sure we start with a clean slate. )
These two tables will act as my 'repository'.
To simplify matters I've also created 2 views that look at the same APEX views.
CREATE OR REPLACE VIEW v_report_settings AS
SELECT r.*
p.page_name
FROM flows_030100.apex_application_page_ir_rpt r,
flows_030100.apex_application_pages p
WHERE UPPER ( r.application_name ) = <Your App Name>
AND r.application_user 'APXWS_DEFAULT'
AND r.session_id IS NULL
AND p.application_id = r.application_id
AND p.page_id = r.page_id;
CREATE OR REPLACE VIEW v_report_conditions AS
SELECT r.*
p.page_name
FROM flows_030100.apex_application_page_ir_cond r,
flows_030100.apex_application_pages p
WHERE UPPER ( r.application_name ) = <Your App Name>
AND r.application_user 'APXWS_DEFAULT'
AND p.application_id = r.application_id
AND p.page_id = r.page_id;
I then built 2 screens:-
1) Publish Report Settings
This shows 2 report regions:-
- Region 1 - Shows a list of all your saved reports from V_REPORT_SETTINGS (filtered to only show yours)
SELECT apex_item.checkbox ( 1, report_id ) " ",
page_name,
report_name
FROM v_report_settings
WHERE application_user = :APP_USER
AND ( page_id = :P27_REPORT OR :P27_REPORT = 0 )
ORDER BY page_name,
report_name
Each row has a checkbox to select the required settings to publish.
The region has a button called PUBLISH (with associated process) that when pressed will copy the settings from
V_REPORT_SETTINGS (and V_REPORT_CONDITIONS) into USER_REPORT_SETTINGS (and USER_REPORT_CONDITIONS).
- Region 2 - Shows a list of already published reports in table USER_REPORT_SETTINGS (again filtered for your user)
SELECT apex_item.checkbox ( 10, s.report_id ) " ",
m.label,
s.report_name
FROM user_report_settings s,
menu m
WHERE m.page_no = s.page_id
AND s.application_user = :APP_USER
AND ( s.page_id = :P27_REPORT OR :P27_REPORT = 0 )
ORDER BY m.label,
s.report_name
Each row has a checkbox to select a setting that you would like to delete from the repository.
The region has a button called DELETE (with associated process) that when pressed will remove the selected
rows from USER_REPORT_SETTINGS (and USER_REPORT_CONDITIONS).
NB: P27_REPORT is a "Select List With Submit" to filter the required report page first.
Table MENU is my application menu table where I store my menu/pages info.
2) Import Report Settings
This again shows 2 report regions:-
- Region 1 - Shows a list of all published reports in table USER_REPORT_SETTINGS (filtered to show only other users saved reports)
SELECT apex_item.checkbox ( 1, s.report_id ) " ",
m.label,
s.report_name,
s.application_user
FROM user_report_settings s,
menu m
WHERE m.page_no = s.page_id
AND s.application_user :APP_USER
AND ( s.page_id = :P28_REPORT OR :P28_REPORT = 0 )
ORDER BY m.label,
s.report_name,
s.application_user
Each row has a checkbox to select the setting(s) that you would like to import from the repository.
The region has one button called IMPORT that when pressed will import the selected settings.
It does this by using the 2 above mentioned package procedure to create a new saved report for you
with the information form the repository. Be careful to match the right column with the right procedure
parameter and to 'reverse' any DECODEs that the view has.
- Region 2 - Shows a list of all your saved reports from V_REPORT_SETTINGS (filtered to only show yours)
SELECT page_name,
report_name
FROM v_report_settings
WHERE application_user = :APP_USER
AND ( page_id = :P28_REPORT OR :P28_REPORT = 0 )
ORDER BY page_name,
report_name
This is only needed to give you some feedback as to whether the import succeeded.
A few proviso's:-
a) I'm sure there's a better way to do all this but this works for me :-)
b) This does not work for Computations! I have not found an API call to create computations.
They will simply not come across into the repository.
c) If you import the same settings twice I've made it so that the name is suffixed with (2), (3) etc.
I did not find a way to update existing report settings. You can only create new ones.
d) Make sure you refer to your saved reports by name, not ID, when matching APEX stored reports and the
reports in your repository as the ID numbers may change if you re-import an application or if you
auto-generate your screens/reports (as I do).
Ruud
>
To me this is a bit too much of a hack and I personally wouldn't implement it - it's just an example to show it can be done.
Also if you look here in the help in APEX Home > Adding Application Components > Creating Reports > Editing Interactive Reports
...and go to the last paragraph, you can embed predicates in the URL.
Cheers
Ben
http://www.munkyben.wordpress.com
Don't forget to mark replies helpful or correct ;)
Edited by: Munky on Jul 30, 2009 8:03 AM

Is it possible to setup a different language for the user account?

Hi,
My server is in English but many of my users will use French.
Can I setup in WGM a different language (international) for the user?

The settings are changed in at least three locations for a user account. Changes are made to ~/Library/Preferences/.GlobalPreferences, ~/Library/Preferences/com.apple.HIToolBox.plist, and ~/Library/Preferences/ByHost/com.apple.HIToolBox.<MACAddress>.plist. There are a lot of keys in there that get changed and might vary between 10.4.x and 10.5.x -if you have a mixed OS environment. So while you you may be able to import the first two into WGM, the last one might be the most trouble as it's machine specific.
If you gave access to the 'International' System Prefpane, it wouldn't affect anything but the student account since their prefs are saved to a network location or to their local PHD account. Changes would revert to whatever the system default preferences were on logout. Those would be the prefs in /Library/Preferences.
The 'International' System Prefpane has many listings for the other language choices that are installed on the system which could be a source of confusion for student users. Removing those resources, using certain tools like MonoLingual, can make certain software behave badly or even make the system unusable. Use with caution.

Security Filtering for GPO processing

Hi,
I have an OU which contains all the servers accounts. I have multiple GPOs that are linked to this OU but I have a GPO that contains only User configuration part witha script to map files. Requirement is that this policy should be applied when a groups of
users logs on to a group of servers only.
If I add the required User group & required computer accounts to the Security filtering of this GPO, will it work good? Is there any other way that will give required result but with lesser GPO processing time.
Thanks
Vipin Tyagi (MCSE 2003) Windows Admin

In our environment, all GPOs are applied to Computer OUs, not a single GPO applied to User OU. Do we need to enable Loopback processing for all GPOs having user setting?
No.
Loopback Processing is rather special, in the way that, if enabled in any GPO, and that GPO is linked to an OU, all GPOs linked to that OU will operate in Loopback mode.
When you enable Loopback Processing, this changes the way that GPO is processed on computers in the linked OU.
e.g. if you enable Loopback Processing on a single GPO linked to an OU, and there are 3 other GPOs linked to that same OU, all 4 GPOs will operate in Loopback Processing mode for that OU.
For this reason, there are suggestions on how to implement Loopback Processing, e.g. create a new GPO, name that GPO something like "Enable GPO Loopback in Merge mode" or "Enable GPO Loopback in Replace mode", then link this GPO to the relevant OUs where
you need it.
Don't enable Loopback Processing in a GPO that also performs other GPO settings.
Using this method, you can quickly see (due to the display name) when Loopback Processing is applying to any OU, and, clearly see in all RSOP/GPresult data when Loopback is occurring.
[troubleshooting GPO can be tricky, particularly when you don't know Loopback is occurring]
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

"Always Available off line" menu item not available for user on computer where another does see it. This is on Active Directory Computer

I have a lap top that I want to add files via Always available off line.
When I logon and right click on a folder share I can see the menu item all was available offline. When the user logs on this option is not available. I have turned the feature on and off, rebooted, I have deleted the cache folder but I cannot
see how to get this menu item to show up. It's odd that it shows up for one user but not another on the same computer. I have searched the web and tried the above things and others but cannot seem to resolve this problem. It seems pretty
common and their. This computer is on a domain.
thanks.

Hi,
So as we edited the group policy settings in the default domain policy, the menu item is now available?
And as we are in a domain environment and the settings is configured under the default domain policy, how the domain users behave different from each other? Which someone could see and the other not？
Could we please generate a
GPO report to take a check?
And regarding group policy issue, it is recommended to seek help in the group policy forum, experts there may share some insights:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserverGP
Best regards
Michael Shao
TechNet Community Support

We have two Apple ID's but share the same computer....that runs Itunes...How do i setup Icloud for ea. user ID?

We have two Apple ID's but share the same computer....that runs Itunes...How do i setup Icloud for ea. user ID?

You can't merge Apple IDs. What you could do is set up your phone to use the same iCloud accout you are using on your Mac. To do this, go to Settings>iCloud and turn all synced data (Contacts, Calendars, etc.) to Off. When prompted, choose to keep the data on the phone. When everything is off, scroll to the bottom and tap Delete Account. Now add the iCloud account you set up on your Mac (with the same Apple ID) and turn syncing back on for Calendars, Contacts, etc. When prompted, you will probably want to choose merge, to merge the data on your phone with the existing data on this iCloud account.

How do I configure a proxy for all users via GPO on Server 2012 R2?

I would like to configure a proxy that applies to all users that log into our server running Server 2012 R2. I can manually set up the proxy (on an individual account basis) via Internet Options in Control Panel but this proxy needs to be configured for
all users. Is it possible to do this in Group Policy Management for Server 2012 R2?
Thank you
Silas Horton

> Have you checked *User configuration\Policies\Windows Settings\Internet
> Explorer Maintenance\Connection\Proxy Settings *in group policy?
He cannot check this because it is't available anymore starting with
Server 2012/Windows 8/IE 10...
> Hope it helps.
No, it doesn't :)
Better check User configuration - Preferences - Control Panel Settings -
Internet Settings
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

How to configure default parental settings for all users (10.7)?

Hello,
I've made a silent installation of iTunes using MSI files and it works well.
I need to enable parental controls and configure it. Users must be preventing of changing these settings.
At the end of the iTunes installation I automatically created registry keys :
[HKEY_LOCAL_MACHINE\SOFTWARE\Apple Computer, Inc.\iTunes\Parental Controls]
"AdminFlags"=dword:001b7ac5
"AdminMoviesLimit"=dword:000000c8
"AdminTVShowsLimit"=dword:000001f4
"AdminRatingSystemID"=dword:0000000b
"AdminGamesLimit"=dword:0000012c
According to http://support.apple.com/kb/HT2102 it is the procedure to set default parental settings for all users and to lock these settings.
When iTunes is first launched, parental settings are not set nor locked.
I use iTunes 64 bits on Windows 7 64 bits.
Where is the mistake?
Thanks in advance.

You can set up a system cache for sharing jars: See here: http://java.sun.com/j2se/1.5.0/docs/guide/javaws/developersguide/enterprise_config.03.06.html

Can you retrieve a task list for a user without specifying that user's connection settings?

Hi
I would like to know if it is possible to obtain a list of workspace tasks for a user of my choice. In the following code, taken from the relevant quickstart, I am able to retrieve a list of tasks for "administrator" because it is the "administrator" settings specified in the connection properties when obtaining an instance of ServiceClientFactory. If I wanted to obtain a list of tasks for user "greg", for example, is there a way I can do this without having to specify the settings for "greg" in the connection properties? I tried to invoke the setUserId() method of the TaskFilter interface but no tasks are returned for user "greg" in that scenario. The aforesaid user has 3 tasks assigned to him. If I specify the user name and password for "greg" in connection settings, I am able to retrieve his list of tasks successfully. However, this is undesirable because I want to be able to retrieve a list of tasks for any user of my choice, by passing a parameter. Is that possible? Code follows:
//Start of code
import com.adobe.idp.dsc.clientsdk.ServiceClientFactory;
import com.adobe.idp.dsc.clientsdk.ServiceClientFactoryProperties;
import com.adobe.idp.taskmanager.dsc.client.TaskManagerClientFactory;
import com.adobe.idp.taskmanager.dsc.client.TaskManagerQueryService;
import com.adobe.idp.taskmanager.dsc.client.query.StatusFilter;
import com.adobe.idp.taskmanager.dsc.client.query.TaskFilter;
import com.adobe.idp.taskmanager.dsc.client.query.TaskRow;
import java.util.Iterator;
import java.util.List;
import java.util.Properties;
public class RetrieveTaskInfo {
    public static void main(String[] args) {
        try {
            //Set connection properties required to invoke LiveCycle
            Properties connectionProps = new Properties();
            connectionProps.setProperty(ServiceClientFactoryProperties.DSC_DEFAULT_EJB_ENDPOINT, "jnp://localhost:1099");
            connectionProps.setProperty(ServiceClientFactoryProperties.DSC_TRANSPORT_PROTOCOL,Service ClientFactoryProperties.DSC_EJB_PROTOCOL);
            connectionProps.setProperty(ServiceClientFactoryProperties.DSC_SERVER_TYPE, "JBoss");
            connectionProps.setProperty(ServiceClientFactoryProperties.DSC_CREDENTIAL_USERNAME, "administrator");
            connectionProps.setProperty(ServiceClientFactoryProperties.DSC_CREDENTIAL_PASSWORD, "password");
            //Create a ServiceClientFactory object
            ServiceClientFactory myFactory = ServiceClientFactory.createInstance(connectionProps);
            //Create a TaskManagerQueryService object
            TaskManagerQueryService queryManager = TaskManagerClientFactory.getQueryManager(myFactory);
            //Define search criteria by performing a search on
            //Assigned tasks (tasks assigned to the user specified
            //in connection properties)
            TaskFilter filter = queryManager.newTaskFilter();
            StatusFilter sf = filter.newStatusFilter();
            sf.addStatus(StatusFilter.assigned);
            filter.setStatusFiltering(sf);
            //Perform the search
            List result = queryManager.taskList(filter);
            //Create an Iterator object and iterate through
            //the List object
            Iterator iter = result.iterator();
            while (iter.hasNext()) {
                TaskRow myTask = (TaskRow)iter.next();
                //Get the task identifier value
                long taskId = myTask.getTaskId();
                //Get the status of the task
                long taskStatus = myTask.getTaskStatus();
                //Get the name of process on which this task is based
                String processName = myTask.getProcessName();
                //Get the task description
                String taskDes = myTask.getDescription();
                System.out.println("The task identifier is " + taskId + "\n" +
                        "The status of the task is " + taskStatus + "\n" +
                        "The name of the process on which the task is based is " + processName + "\n" +
                        "The task description is " + taskDes);
        } catch(Exception e) {
            e.printStackTrace();
//End of code
Thanks
Darren

Paul,
Thanks very much, I never tried just asking for the parameter I was looking at the entire list coming back from a query with no filters. Using the DBMS_LDAP package you can in fact get their GUID.
I understand your concern for the use of the field and for other reasons have moved to a different identifier to tie OID accounts to our internal application user accounts.
Thanks very much, I'm still glad to know how to do get at the info.

GPO Filtering for a user of computer settings.

Similar Messages

Maybe you are looking for