Group Policy Question HELP!

[Jeff]

Hello.

Windows 2000 Server AD

I created a new OU called TEST and created a group policy
to deploy a MSI package and I want to install it by
computer, not user.

When I move the computer account to the TEST OU the MSI
package deploys without a hitch.

I want to deploy this package to multiple computers in
different OU's. I read MS article 302430 and followed the
simple instructions.

I added the computer accounts to a security group and
assigned the GP to that group. When the computer starts up
the policy does not run and nothing is in the event log.
What am I doing wrong????????????

Help Please!

 

[Tim Hines [MSFT]]

Group policies only apply to computer and user objects and not groups. That
is why the policy is not applying to the group of computers that you placed
in the OU. You will need to place the computer object in the OU.


--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[diasmith [MSFT]]

Hello Jeff,

In order to do this, you would only have to link this gpo to each OU,that
has the computer accounts that you want the policy to apply to.

Here is an article that will walk you through linking this gpo to each OU
(see step 7):
322143 HOW TO: Administer GPOs in Windows 2000
http://support.microsoft.com/?id=322143

*** you should run the secedit command to ensure it has been linked.

PS. 302430 -- talks about applying this to a group of users, not a group
of computers:
11. Click the Security tab, and then remove Authenticated Users from the
list.

12. Click Add, select the security group which you plan to have this policy
applied to add it to the list.

13. Select your security group, and then give them READ and Apply Group
Policy permissions.

Thank You.

Diana.

(e-mail address removed)

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Jeff]

Tim,

Are you sure? MS Article 302430 says you can assign
specific groups to deploy to users or computers. (This is
what I can't get to work.

 

[Tim Hines [MSFT]]

Yes, I am sure. Groups can be used to filter group policies from applying
but policies will not apply to groups placed in the OU. See the following
article below for information on filtering group policies using groups.

http://support.microsoft.com/?id=322176

--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.