Managing group policies for our 119 locations

Question

I wonder if it is possible to create the following in a eDir configuration.
AMS_USB-ON\
ROT_USB-ON----BENELUX_USB-ON
LUX_USB-ON/
AMS_USB-OFF\
ROT_USB-OFF---BENELUX_USB-OFF
LUX_USB-OFF/
I want to be able to assign the possibility/disability to use USB to BENELUX_USB-ON/OFF and via this way affect the underlying groups.
This way i wont have to push the policies to the 119 locations twice.
This sample is only talking about 2 policies for 119 locations, imagine the work done with 10 or more different policies.
I hope you can shine your lights on this.
Best regards Danny

Answer 1

Originally Posted by dchiara
Danny I don't quite follow, would you mind re-explaining what you are trying to accomplish? Do you want the BENELUX device allowed in some locations and off in others?
What im trying to accomplish is the following,
Like i say'd im having 119 locations world wide to manage in my eDir.
I have a separate OU from every location (AMS, ROT, LUX etc.).
Now I create 2 GROUPS, in all the location OU's, called [loc]_USB_ON and [loc]_USB_OFF (e.g. AMS_USB_ON).
I also have 1 GLOBAL OU which is where global stuff gets managed. (duh)
So in the GLOBAL OU i create 2 GROUPS, USB_ON and USB_OFF.
In these groups I want to add the [loc]_USB_ON/OFF groups, so you get a situation like this;
AMS_USB-ON\
ROT_USB-ON----USB-ON
LUX_USB-ON/
AMS_USB-OFF\
ROT_USB-OFF---USB-OFF
LUX_USB-OFF/
Now in ZESM I created a policy USB_ON and a policy USB_OFF, this policy i want to assign to the USB_ON/OFF groups in GLOBAL with the intention to let it tumble down the groups tree and end up in all the location groups.
I really hope this is do'able, otherwise it will be a real hell to manage all these locations when you think about all the other policies an Admin might want to push.
I know its a long story but i hope it cleares it up a little.... looking forward to your reply.
Regards Danny