How to configure a group to get Group Policy settings

[Barry Koopersmith]

I created a Group Policy for an Organization Unit. If I move a user to
that Organization Unit, he gets the Group Policy settings. If I create a
"Security Group - Domain Local" in that Organization Unit and add a user
as a member of that group, he does not get the Group Policy settings.

Is there anyway to have a group get Group Policy settings or must the
actual user to placed in the Organization Unit that has the Group
Policy?

Thanks to anyone who can help me out.

 

[punsor]

I don't think you can. Group will have its SID and user
will have his SID. I think group policy will work for
computer and users....not for group..
thanks,

 

[Cary Shultz]

-----Original Message-----
I don't think you can. Group will have its SID and user
will have his SID. I think group policy will work for
computer and users....not for group..
thanks,
Unit
and add a user settings
or must the
.

While you cannot directly apply a GPO to a Security Group
( remember the pecking order: Local, Site, Domain, OU,
sub-OU ) you very much can use a Security Group to filter
the GPO. Normally, the group 'Authenticated Users' has
the 'Read' and 'Apply Group Policy' rights to the GPO.
Simply delete that entry and replace it with the Security
Group of your choice. Just remember to give 'the
Security Group of your choice' those two rights!

HTH,

Cary Shultz
Windows Server - Active Directory MVP