GPO (OU vs DOMAIN)

[Luis Jesus]

Hi all,

Here is my setup. One domain one domain wide policy which
is being applied successfully. I now would like to run
some tests and have done the following:

Used and existing PC in the domain and have made it a
member of a group (group_test) I have also made this group
a member of an OU (OU_test). So now I have the PC a
member of the group_test which in turn is a member of the
OU_test.

I have written a start and shutdown script and have
pointed the start and shutdown script to the path the GPO
asked for
(sysvol\domain\policies\GUID\machine\scripts\startup and
or shutdown). I have also on this OU GPO selected the NO
OVERRIDE selection so that other GPO are not applied to
the container OU_test.

On the domain policy I have selected PROPERTIES\SECURITY
and have added the PC name to the security and have
selected APPLY GROUP POLICY DENY.

I have waited for about the default 90 min for the policy
to refresh and it is just not applying. Any ideas???

I have also tested this in my domain at home and it worked
perfectly.

LJ

 

[John]

Put the computer object in the OU_test. Putting the group that contains the
computer object in the OU does not work.