A machine belongs to multiple OUs

[M. Eteum]

Learning about Group Policy, I'm stuck on how to put a machine into
different OUs where I can link different Group Policies to each OUs.

Is it possible?If not, how(best practice) to apply/link group policies
on groups of machines belong to different OUs?

 

[Paul Williams [MVP]]

You can't place objects in multiple OUs - there's only one instance of any
unique object.

If you want to apply policy to select computers across multiple OUs, use
group policy filtering - link the GPO higher up (the parent OU or the
domain) and filter to only apply to a security group. Then add the
computers to that group.

Here's some more info. on filtering:
-- http://www.msresource.net/content/view/15/47/

 

[Steven L Umbach]

You can also link the same Group Policy to different OU's though that makes
most sense if the computer/user is not in an OU that would already inherit
settings from the GPO. A computer/user can exist only in one OU. You need to
plan your OU structure in such a way that computers/users get the Group
Policy settings they need. OUs can be structured in a tree fashion where all
the OUs under the "root" OU could potentially inherit GP settings from
parent OUs up to the root OU. Of course any OU in the domain can inherit
settings from the domain container. The link below is to a MS white paper on
Group Policy that should be able to answer all your questions even if you
read only the parts you are interested in but be sure to read about Group
Policy processing so you can understand it to design your OU structure most
effectively. -- Steve

http://www.microsoft.com/downloads/...BC-D445-4E8F-AA4E-B9C27061F7CA&displaylang=en