RE: GPO not being applied to OU

I believe you need to readd authenticated users, as that would include the
computer accounts that you wish to apply it to. visitors from other OUs will
not have user policies applied, as they only apply to users within the OU you
link the GPO to. remember that computer GPO settings will only apply to
computer accounts and the GPO must be linked to the OU that contains the
computer accounts.

"Mike W" wrote:

> We have a GPO setup in an OU with the following child OUs: Users,
> Workstations. The GPO is being applied to the users, but not the
> workstations. rsop.msc shows only the local policy in place for the computer
> configuration section of the policy. gpresult.exe says "not applied (reason
> unknown)" for the computer configuration.
>
> In looking at security settings for the GPO, Authenticated users was removed
> and replaced with the group containing the users listed in the Users OU.
> This was done to prevent the policy from being applied to "visitors" from
> other OUs. But by doing this, didn't we end up excluding the computers in
> our OU as well? If so, how would we repair this? Link the GPO to the
> Workstations OU? Change the security setting on the parent OU for the GPO?
> Would this include having to create a security group with all the computers
> listed?
>
> Thanks for the enlightenment.
.

Relevant Pages

  • Remove Add or Remove Programs GPO Question
    ... Programs" GPO but with the following stipulations: ... I have created an OU with the desktop computer accounts and an OU with the ... Authenticated Users - Allow Apply Group Policy ...
    (microsoft.public.windows.server.active_directory)
  • RE: GPO not being applied to OU
    ... if you're trying to target computer accounts with computer specific policies ... in the GPO you absolutely have to link to the computer OU or the parent OU ... Don't forget to put the authenticated users Read and Apply Group ... >> member of the authenticated users group. ...
    (microsoft.public.windows.group_policy)
  • RE: GPO not being applied to OU
    ... I was under the impression that "authenticated users" meant everyone that was ... > link the GPO to. ... >> Workstations. ... >> In looking at security settings for the GPO, ...
    (microsoft.public.windows.group_policy)
  • Re: Security Filtering in Group Policy
    ... It sounds like you have the GPO set up *mostly* properly from a technical ... computer accounts are located elsewhere - like in the default 'Computers' ... The time that you would use a security group ... you simply remove the Authenticated Users ...
    (microsoft.public.win2000.active_directory)
  • Re: User GPO not applying unless linked to computers
    ... It does sound like loopback processing is enabled on the computer OU ... If not using default permissions such as authenticated users I like ... to use global groups and not domain local groups in GPO permissions. ... > I have an OU which contains all computer accounts for the domain. ...
    (microsoft.public.win2000.group_policy)