Re: Group Policy Not Applying to an OU

From: Eric Anderson (eanderson_at_steinmart.com)
Date: 05/27/04


Date: 27 May 2004 10:52:38 -0700

Okay, I finally figured it out.

I was using the Group Policy Management Console and in there I was
adding a Group under the Security Filter. I also had placed that Group
under the OU Container in the Active Directory Users and Computers
console. This was failing.

My solution was to add only User accounts to the OU under the ADUC
console and accept the default Security Filter of "Authorized Users"
in the GPMC. Further testing with this in the GPMC shows that I can
use a specific Group in the Security Filter, but User accounts have to
be placed in the OU container in ADUC.

It's always one bloody little thing....

Thank you all. Take care.

EJA

eanderson@steinmart.com (Eric Anderson) wrote in message news:<44e037e5.0405260602.1ac9797@posting.google.com>...
> Hello All,
>
> I have a test network with one DC running Server 2K3 and one
> workstation running Windows XP. I created several test users, several
> test Global Groups, and two OUs. I then created some group policies
> and added my GGs to the OU with a linked GPO. The GPO did not apply.
> If I placed the GPO at the domain level, it applied, but it does not
> apply when it is at the OU level. I then removed the group from the OU
> and added just a single user. Again, the GPO did not apply. I even
> checked "Enforced" for the GPO without any result. There are no DNS
> related error messages on the server or workstation.
>
> The only policy that applies is one at the domain level. What am I
> doing wrong? I've worked on this for weeks, have torn apart
> support.microsoft.com, googled my tail off, and cannot determine why
> my policy works in the domain, but not the OU.
>
> What am I missing?
>
> Thank you,
> Eric Anderson
> Network Analyst
> Stein Mart Inc.



Relevant Pages

  • Re: Confuse with GPMC Security Filter
    ... I am sure the GPO is only linked to this OU becuase this group ... policy is just for testing and will not apply to any production OU. ... inside the security filter, ... I have linked a GPO to [Citrix Server] OU. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Confuse with GPMC Security Filter
    ... The GPO also has to be linked to a site, ... the Policy will take effect unless the hk_users must be ... inside the security filter, ... under [Citrix Server], all object under this will be affected, right? ...
    (microsoft.public.windows.server.active_directory)
  • RE: Restricted Group Problem My Scenario and problem..what am i doing
    ... if you wish to security filter the policy you must filter it based on ... The computers you wish to apply this policy must have ... Open up a GPO ... this group, I add Domain admins, another domain group, and then i choose ...
    (microsoft.public.windows.server.active_directory)
  • Re: Confuse with GPMC Security Filter
    ... Group Policy Object is applied on all container objects where it is linked to. ... where GPO is linked. ... inside the security filter, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local policy logon interactively on remote laptop
    ... My last effort was to have him boot to the recovery ... console in hopes of removing the policy file but he had ... trouble getting the console to load (separate matter, ... Computer policy is not supposed to be easily ...
    (microsoft.public.win2000.security)