Applying Group Policy to a Group

[Guest]

Hello,
In active directory for my organisation I have set up
different Groups for various people. ie "Terminal
Services User" and "No Internet". Within each of these
groups I have created a Group Policy that configures each
of those groups.
For these policies to work, I have added the users to
either one of these groups.

This works fine

The problem lies when I want to have a single user added
to both groups.

The logical solution is to create a user-group as people
can belong to multiple user-groups, but this doesn't work.

I hope I have explained myself well enough and that
someone can help

Regards,
Chris

 

[Chriss3]

Make sure both groups have at least Read and Apply Policy to the Group
Policy Object.
To apply a GPO to a specific group, both the Read and Allow Group Policy
ACEs are required. By default, all Authenticated Users have both these
permissions set to Allow. Since everyone in an organizational unit is
automatically an Authenticated User, the default behavior is for every GPO
to apply to every Authenticated User. However, domain administrators,
enterprise administrators, and the LocalSystem account already have full
control permissions, by default, without the Apply Group Policy ACE.
Therefore, since administrators are also Authenticated Users, they too, by
default, will receive the policy settings in the GPO. This may not be the
appropriate scenario.

 

[Simon Geary]

You do not apply Group Policies directly to groups but what you could do
here is create a third OU that contains the users that you want to get both
Group Policies applied to and put them in that. Then you would link this new
OU to both policies.

 

[Ken Butler]

You can also create a GPC where only a specific AD group has apply rights.