It is my understanding that if you create a Group Policy and apply it to an
OU then this applies to only those objects within the OU. Is that correct?

Therefore if you have an OU with only users objects in it and not any
Computers objects then the Computer Configuration elements with that Group
Policy is obsolete and will not apply. Is this correct?

Hi,

Steven Barlow schrieb:
> It is my understanding that if you create a Group Policy and apply it to an
> OU then this applies to only those objects within the OU. Is that correct?

Yes, and from this point "downwards", if you do not manipulate it.
It´s called the scope of the GPO.

It´s the same behavior in NTFS security, if you apply settings to "D:\Data"

It´s effecting the objects inside and beneeth, if you do not block
inheritance.

> Therefore if you have an OU with only users objects in it and not any
> Computers objects then the Computer Configuration elements with that Group
> Policy is obsolete and will not apply. Is this correct?

Right. Why?
Computerconfiguration can only be applied to Computers
Userconfiguration can only be applied to users.

.... a User is not a computer ... so ... simple :-)

Mark
--
Mark Heitbrink - MVP Windows Server - Group Policy

Homepage: www.gruppenrichtlinien.de - deutsch
Discuss : www.freelists.org/list/gpupdate