|
How does GPO process and/or logic? I need to apply a printer to all but two users. I can't take the two users out of the group they're in and I don't want a new group for everybody but them. I'm using item level targeting, but I don't trust GPO to process logic as I would expect it to. If I do: create printer if not user A AND if not user B Do I get; p = ~A ^ ~B, Or is it; p = ~(A ^ B) If GPO groups both "not" cases together, the second result, I'll get the printer every time unless I change the logic to "OR". Or is there a better way to do this that I'm just missing altogether?
|
#
¿
Jun 5, 2014 20:05
|
|
|
|
| # ¿ Apr 27, 2024 06:08 |
|
|
According to logic statements though, T or F is true since one of the criteria is met. Similarly, ~T or ~F is still true. True in this case is getting the printer mapped so the or statements shouldn't work. User A gets the printer for meeting "or the user isn't user B" requirement. Unless GPO is hosed up and processes this as ~(true or false), getting false. It should require an and statement since ~true and ~false is false. I've been struggling trying to wrap my head around this all day. But this thread has pointed me in the right direction. User A and user B are in a new security group, printer is applied to users not in the group. No need for two statements at all.
|
|
#
¿
Jun 6, 2014 03:16
|
|
|
Ok cool, thanks. I've got the understanding of the logic down, it was just a question of how GPO processes two statements. If they were processed individually (~a and ~b) I need a different solution than if they are processed together as ~(a or b). The way it's worded on the screen implies they are processed individually because there is a not in front of both cases. It doesn't make sense that GPO would take two not statements, group them as positives, then add the negative to the group as the second example shows.
|
|
#
¿
Jun 6, 2014 12:19
|
|