Applying Group Policies to OU

[Steven Barlow]

It is my understanding that if you create a Group Policy and apply it to an
OU then this applies to only those objects within the OU. Is that correct?

Therefore if you have an OU with only users objects in it and not any
Computers objects then the Computer Configuration elements with that Group
Policy is obsolete and will not apply. Is this correct?

 

[Mark Heitbrink [MVP]]

Hi,

It is my understanding that if you create a Group Policy and apply it to an
OU then this applies to only those objects within the OU. Is that correct?

Yes, and from this point "downwards", if you do not manipulate it.
It´s called the scope of the GPO.

It´s the same behavior in NTFS security, if you apply settings to "D:\Data"

It´s effecting the objects inside and beneeth, if you do not block
inheritance.

Therefore if you have an OU with only users objects in it and not any
Computers objects then the Computer Configuration elements with that Group
Policy is obsolete and will not apply. Is this correct?

Right. Why?
Computerconfiguration can only be applied to Computers
Userconfiguration can only be applied to users.

.... a User is not a computer ... so ... simple

Mark