Hello,
I need some help understanding something. I created a GPO to create an icon on a users desktop. I configured the USER settings of the GPO for this. I only want this GPO to be applied to a certain user and/or security group. I created a test user and changed the security filtering on the GPO to only be applied to this test user. I placed the GPO in the same OU as the test user.
I did a force update on the client workstation and the GPO was not being applied. I then added the workstation that I was using to test into the security filter of the GPO. My GPO now works.
My question: I don't want to have to add all the machine names to the security filter (these are floating users and they use different PC's from time to time and they will change). Shouldn't just adding the users and/or security group from AD to the security filter in the GPO accomplish this? How can avoid having to add all the machine names into the security filter and accomplish the same goal? Any help would be greatly appreciated.
Thanks!