AD Group Policy Objects

[Darren Gaile]

All,

Am trying to lock down a few PC's in the same OU using a
Group Policy. When I add the PC's to the OU, the group
policy doesn't get applied, but if I go the other way and
add the users to the OU, they policy does get applied.
But I want to be able to lock down the PC's no matter who
logs on. I'm wondering if there's something I need to do
to make the PC take the policy. There's no overrides or
anything in place and all the documentation basiclly says
you just add the objects to the OU that has the Group
Policy setup and that's it. I'm thinking I'm missing
something obvious.

 

[Chriss3]

Hi Darren. Only Setting under Computer Configuration will be applied to
Computers in the particular OU. By default Users Configuration will applies
to Users in this particular OU. What you want to do is called Group Policy
Looback Processing. This means even the user part of the particular GPO will
be applied to computers in the particular OU. no matters where the Users
accounts are located within Active Directory

231287 - Loopback Processing of Group Policy
http://support.microsoft.com/support/kb/articles/q231/2/87.asp

I hope that helps, have a nice night!