GPO HEPL!!!

[carlos]

I have a new win2k domain on one DC. I have created 2 OU's
staff & students. I have also created 2 gpo's in the mmc
and applied one each to the above OU's in AD Users &
COmputers. The policy is listed in SYSVOL.
When I test the policies no settings are being applied.
TIA

 

[Richard Moreno]

Hi Carlos-

You don't mention what kind of GPO's you've enabled. I.e. User or Computer.
Either way, the objects you want the GPO to apply must be members of that OU
which has the GPO linked to it.

 

[MJC]

Richard:

You seem pretty quick and accurate with responses and this sparked a similar question...

I'm planing on enabling GPOS for users across multiple OUs...can I follow the following KB artible??? using group memberhip to enforce a GPO? The article describes software deployment...and I'm wondering if it hold true for User\Computer settings as well.

http://support.microsoft.com/default.aspx?scid=kb;en-us;302430&Product=win2000

 

[Enkidu]

Richard:

You seem pretty quick and accurate with responses and this sparked a similar question...

I'm planing on enabling GPOS for users across multiple OUs...can I follow the following
KB artible??? using group memberhip to enforce a GPO? The article describes software
deployment...and I'm wondering if it hold true for User\Computer settings as well.

http://support.microsoft.com/default.aspx?scid=kb;en-us;302430&Product=win2000

No. Software deployment is a special case. GPOs only apply to OUs,
Domains and sites and the objects that the GPOs apply to must be in
one of those.

The only exception is that you can *prevent* a GPO applying to members
of a security group by removing the read permission for that group to
the GPO. But the members of the group must be in the container that
the GPO is applied to.

Cheers,

Cliff