Re: GPO not working in OU using computer security group

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Mark Renoden [MSFT] (markreno_at_online.microsoft.com)
Date: 06/16/04


Date: Thu, 17 Jun 2004 08:25:08 +1000

Hi Steven

Policy won't apply to the computers if you place the group in the OU. The
computer accounts must reside in the OU for the policy to apply. With
respect to group policy, groups can only be used to filter the application
of the policy. For example, you may have all computers in one OU and then
create an ACL on the GPO so that only a certain group of computers can read
an apply the policy.

Kind regards

-- 
Mark Renoden [MSFT]
Windows Platform Support Team
Email: markreno@online.microsoft.com
Please note you'll need to strip ".online" from my email address to email 
me; I'll post a response back to the group.
This posting is provided "AS IS" with no warranties, and confers no rights.
"Steven" <Steven@discussions.microsoft.com> wrote in message 
news:A6DD9D3F-5B47-4640-83F0-39565789CF3C@microsoft.com...
> We have currently a software install policy on an OU which rolls out 
> visio. It is working very well when applied to individual PC's. But then 
> we have  move the computers to the OU  So we thought let's make a Global 
> Security Group which contains the machine's where we would like to install 
> the software and put the group in the OU. Applied the security settings to 
> the policy.   Now the Policy is not applied  What could be wrong ???? 


Relevant Pages

  • Re: Reinstall everytime assigned applications through GPO on start
    ... Software installation extension has been called for background policy refresh ... Stations - R&D Software (EMEA computers). ... Stations - R&D Software (EMEA computers) is set for installation because it ... The assignment of application Remote Administrator v2.1 from policy Software ...
    (microsoft.public.windows.group_policy)
  • Proxy GPO will not apply
    ... with a new security group containing 3 test computers. ... Made the proxy settings per-machine instead of per-user. ... Made the policy be Enforced. ...
    (microsoft.public.windows.group_policy)
  • Re: better way to limit users/group to logon to specific workstati
    ... You can still do it in policy, ... logon locally setting, and apply it to all computers except the ones you ... Workstations" attribute - applying to the user accounts ...
    (microsoft.public.windows.group_policy)
  • Trouble with GPO security filtering
    ... itself (same level where containers Users and Computers are) ... whose members are two domain computers. ... group policy "B" defined on whole domain ... When GPREsULT is run on machines in security group "A" there is ...
    (microsoft.public.win2000.group_policy)
  • Problem with security GPO filtering
    ... itself (same level where containers Users and Computers are) ... whose members are two domain computers. ... group policy "B" defined on whole domain ... When GPREsULT is run on machines in security group "A" there is ...
    (microsoft.public.win2000.group_policy)