Policies in Users OU don't process

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Some feedback on me. I'm an IT consultant. I directly manage or assist in
managing over 100 domains. We setup domains for new networks, migrate
domains, fix domain based networks, and basically do this stuff all the
time.

My problem is, at one of my sites, I can't get group policies to apply to
user OU's. All of the policies set to the workstation and servers work
fine. User policies will apply to the users ONLY if they are placed in the
root folder. If I move the policy to a sub OU, it's as if they don't even
exist.

Here's my OU structure:

Domain.local
Domain Computers
SMRU
TH
Domain Controllers
Domain Terminal Servers
Domain Users
Public Safety
Public Works
SMRU
Town Hall

Lets say for example I want to redirect my docs and map some drives with a
batch file. If I setup a new GPO under Domain\Domain Users, nothing will
happen. If I move it back to the Domain (root) folder, they work.

More info: I ran a Group Policy Results query on a user and their computer.
Everything looks great til I get to the user policies. Where it lists
Applied GPO's and Denied GPO's, the policies applying to the users don't
show up at all. If I move the GPO's back to the root, then they show up.

I've had this issue on this domain for some time and it didn't really matter
because I could put the mapped drives and redirects to apply for everyone or
specific groups (by allowing or denying gpo apply rights) from the root.
But now I'm wanting to add more gpo's by location and would like it to work
as it should.

I tried creating a new Domain Users OU and moved all the users to it and
that did not work either.

Any thoughts? I'm baffled that there's not even an attempt to acknowledge
the GPO's exist when they are being processed. It's honestly as if the
GPO's aren't in an OU that applies to the user, but they are.


.

Relevant Pages

  • Re: Policies in Users OU dont process
    ... are not in the scope of the GPO when its linked lower. ... My problem is, at one of my sites, I can't get group policies to apply ... If I move it back to the Domain (root) folder, ... I ran a Group Policy Results query on a user and their ...
    (microsoft.public.windows.group_policy)
  • Re: Policies in Users OU dont process
    ... are not in the scope of the GPO when its linked lower. ... My problem is, at one of my sites, I can't get group policies to apply ... If I move it back to the Domain (root) folder, ... I ran a Group Policy Results query on a user and their ...
    (microsoft.public.windows.group_policy)
  • Re: [opensuse] Recently after an update...
    ... That's a relief, but every time I have had to edit the policies for removable storage, I have had to be root. ... To think that regular users can now manipulate that behavior is a bit confusing to say the least... ...
    (SuSE)
  • Example IT Policies
    ... I am looking for examples of written IT policies that I can use ... Administrator usage ... Personal experience with this ...
    (AIX-L)