Applying GP to OU containing user groups!?

[RJ]

Hi

Note - I'm not a w2k3 or AD guru - but I'm confused nevertheless!

We've created an NT4 BDC, promoted to PDC and upgraded to w2k3 all
successfully and happliy. (test lab!)

Now in the AD, configuiring group policies we can:-
- apply GPO globally (deault)
- apply GPO to specific OU's

If the OU's contain computers, policy is applied.
If the OU's contain just users, policy is applied.

However, if user is "Fred" and "Fred" is a member of a group called
"IT" - and we have "IT" in an OU - then Fred doesn't get the settings.
i.e. we can only apply GP to users and computers - but not user
groups.

This is a pain as we would want to apply GPO to specific user groups:
Default, Laptop Users, IT etc....

Am I missing something?

(Note: If "IT" is member of OU "Test", then Fred doesn't get any
settings. Add Fred to OU Test and he then does. Fred is DEFINATLEY a
member of IT and its his default group).

Help welcome!

 

[Tim Hines, MCSA, MCSE]

Group policies only apply to users and computers and not groups. You can
use groups to filter group policies by modifying the security settings of
the GPO.

see http://support.microsoft.com/default.aspx?scid=kb;en-us;220822

--
--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[RJ]

Tim - perfect answer - thanks.

You know when you search for ages, find nothing, then ask, then keep
searching and find an answer? Bl**dy annoying.