LOGIN SCRIPTS AND OU'S

[Guest]

I have been given an OU to organize my users and groups at my particular location. I've created additional OU's under this ou to better delegate rights. If I run a logon script, through a GPO, that is meant for a particular OU and a user resides in that OU that particular script will be applied to that user. But if a group resides in that particular OU the script will not apply to members of that group unless those members also reside in that OU. Why is that so? Can a script apply to a group that resides in a particular OU without the group members actually residing in that OU? And also, if the group is placed in the GPO's acl and is given the deny access to the apply group policy attribute, even if the user is housed in the same OU the script will not apply to the group members.

 

[Tim Hines [MSFT]]

Group policies are only applied to users and computers. They do not apply
to groups. You can filter group policies using groups. See the following
link on how to use groups to filter group policies

http://www.microsoft.com/windows200...sp?url=/windows2000/en/server/help/filter.htm


--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

I have been given an OU to organize my users and groups at my particular

location. I've created additional OU's under this ou to better delegate
rights. If I run a logon script, through a GPO, that is meant for a
particular OU and a user resides in that OU that particular script will be
applied to that user. But if a group resides in that particular OU the
script will not apply to members of that group unless those members also
reside in that OU. Why is that so? Can a script apply to a group that
resides in a particular OU without the group members actually residing in
that OU? And also, if the group is placed in the GPO's acl and is given the
deny access to the apply group policy attribute, even if the user is housed
in the same OU the script will not apply to the group members.