Apply Computer settings to a specified OU

[feghali_ziad]

Dear folks,

I just want to know how to apply any computer settings to a specified
OU an not to the default domain group policy. When issuing the
gpresult, I always found that on the target computer it takes the
policy fro either the local group policy or from the default domain
group but never from the specified OU. This OU I create where a GPO is
linked to it where inside there's either a security group or domain
local group that contains the target computer account.

Am I missing any configurations or misunderstanding?

Have an enjoyable weekend

 

[Brendon Rogers]

the computer accounts needs to be either in the OU or a sub-OU of where the
policy is applied. Security groups can only be used to filter GPOs - you
can't link GPOs across OUs with them.

 

[Tom_E_Reynolds]

I am having the same issue. I just installed W2K3 AD with
1 test laptop, but can only get the Default Domain GPO to
work. The TestOU, with its TestGPO, are all linked and
enabled, even enforced, yet don't seem to work. Can some
one please help us? This is driving me crazy.

Thanks.

 

[Tom_E_Reynolds]

I did put my test LT in my TestOU, with the TestOUGPO, but
no luck. Only the Default Domain GPO gets applied. Any
other ideas? Thanks!

 

[Jdrew [MS]]

Hey Feghali,

Brendon is correct. A computer account has to be placed in the OU to
receive the policies for that OU and setting security on the GPO in the OU
only acts as a filter as to what group of users/computers have the right to
get it or not.

Jim