policies not applied

[tshepo]

I have tw different OU policies,(Staff and Restrictive)
applied each policy to each AU, and disabled overwrite
and inheritance on each on them. The restrictive policy
is not being applied.

Any hint (Basically I have two polices to both to be
implemented at the OU level)no policy at Domain level

 

[Tim Springston \(MSFT\)]

Could you give us the DNs of the OUs the GPOs are linked to?

Once you have done that could you also go over the permissions change(s) you
described below a little more (maybe step by step to make sure we understand
completely)?

 

[Ray Lava [MSFT]]

tshepo,

From your question it is difficult to determine if you are trying to apply
both of these group policies to the same OU or to different OUs.

If they are being applied to the same OU, then only the first one listed
will get applied since you have "no override" and "block policy inheritance"
selected for both group policies.

If you are applying these GPOs to different OUs, then make sure that
"authenticated users" have "read" and "apply group policy" rights in the
security properties of the restrictive group policy. The group policy will
not apply otherwise.

Another thing to consider is are the users and/or computers members of the
OU? If your group policy settings are made under the "computer
configuration" portion of the gpo, then those changes will only apply to
computers and thus they need to be members of the OU. If your group policy
settngs are made in the "user configuration" portion of the GPO, then the
users will need to be a member of the OU where that GPO is linked.

I hope this helps.

Best Regards,

Ray Lava
Microsoft Corporation

This posting is provided "AS IS" with no warranties, and confers no rights


An easier way to configure these policies to apply to the same OU would be
to list the staff policy first