GPO only applied if user account within OU container

From: Jago (Jago_at_discussions.microsoft.com)
Date: 12/10/04

  • Next message: Shawn Travers: "Group Policy Experts Available for Questions" 
    Date: Fri, 10 Dec 2004 08:45:06 -0800

    Hi,

    I have a W2K AD infrastructure and I have a problem with the application of
    a GPO which is filtered by security group.

    I have setup as follows:

    1. created a OU called 'terminal server'
    2. moved my TS server to this OU
    3. created security group called 'TS Standard' (with member user =tsstandard)
    4. created a GPO named 'standard' in the terminal server OU
    5. restricted/filtered security on the GPO by removing authenticated users
    and adding the security group TS Standard - set read permissions and apply

    When I logon the my TS machine using the tsstandard user, the standard GPO
    is not applied

    If I move the user account into the TS Standard OU, the GPO is applied

    My understanding is that the GPO should be appied without having to move the
    user account into the OU. Correct?

    If this is not the case, please explain?

    If my understanding is correct, can someone help me as I have run out of
    ideas?

    I have used gpresult, GPMC and diagnostic logging. The GPO is just not
    applied.

    Thanks,

    Jago

  • Next message: Shawn Travers: "Group Policy Experts Available for Questions"

    Relevant Pages

    • Re: Block GPO on IP address
      ... a vanilla suggestion that you create a Site GPO for the software deployment. ... Server and use Security Group Filtering (whereby you remove the ... Authenticated Users from the Security Tab and create a Security Group and ... Let's look at the Zuerich, ...
      (microsoft.public.win2000.group_policy)
    • Re: Internet restriction
      ... And the security group that you would use in the Group Filtering would be ... Because we want the members of this ... Authenticated Users group from the Security Tab on the GPO and replace it ... >> OU that contains all of your user account objects. ...
      (microsoft.public.win2000.group_policy)
    • Re: GPMC Group Policy Modeling - installed software
      ... (ie. WindowsMessenger is setup there in a GPO) ... application by membership of this security group. ... and then do the RSoP. ...
      (microsoft.public.windows.server.active_directory)
    • Re: Security Groups in OU
      ... > Can a security group be in an OU and have a GPO linked to it? ... GPOs are applied to user and/or computer objects within ... security group filtering to control application of the GPO. ...
      (microsoft.public.windows.group_policy)
    • Re: Security Groups in OUs
      ... APPLY GROUP POLICY rights to the GPO. ... Let's say that you have an OU in which there are 55 user account objects. ... If one does not already exist, create a security group that includes ... if you did not want to create a group with 51 members - creating one ...
      (microsoft.public.win2000.group_policy)