I made two Organizational Unit in my domain
Thin Clients (there are the physical computer objects)
Virtual Clients (there are the virtual computer objects)
And I have the default
- Users (there are the user and group accounts, etc.)
I want to apply different "User Configuration" GPOs on the two OU-s based on where the user is logged in. (In a lucky situation the user is logged in both of the computers, the physical and the virtual one too.)
So I want to hide all programs, restrict as many resources that I can on the physical computer and I want to apply some other GPO "User Configuration" GPOs on the virtual computer. (I do not want to apply the restrictions on the virtual computer which are applied to the physical one.)
What is the best way to achieve this?? Thanks!