Why GPOs at OU level do not take effect?

[Guest]

Hi,

I want to disable connection tab in internet option on some computers.
For this porpuse I have created an OUs and linked a GPO to it and set the
appropriate policy under user configuration in it. But it does not take
effect?
Have I misconfigured or skipped something?

Thank you in advance,

Regard,
Bijan

 

[Mark Heitbrink [MVP]]

Hi,

I want to disable connection tab in internet option on some computers.
For this porpuse I have created an OUs and linked a GPO to it and set the
appropriate policy under user configuration in it. But it does not take
effect?
Have I misconfigured or skipped something?

.... because your User account is not inside this OU
.... your DNS is nor pointing to the DNS which contains the SRV Records
of your AD
.... because ...

Mark

 

[Darren Mar-Elia \(MVP\)]

If the policy is under User Configuration, then that means that the user who
you want to affect must be in that OU you linked the GPO to. Are they?

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related
Group Policy Management solutions at http://www.sdmsoftware.com

 

[Guest]

Thank you Darren,

What you advised works.
Is there an alternate way to apply the policy without moving user and
computer accounts to OU?

 

[Guest]

Thank you Mark,

What you advised works.
Is there an alternate way to apply the policy without moving user and
computer accounts to OU?

 

[Mark Heitbrink [MVP]]

Hi,

Is there an alternate way to apply the policy without moving user and
computer accounts to OU?

I wouldn´t recommand using the default users and computers container.
GPOs can´t be applied to container, so you have to define same at domain
level und then you have to work with Security settings for filtering
who is allowed to read an apply the policy.
Structuring the AD by OU is the more effective way.

Mark

 

[Guest]

Thank you Mark,

You know I am new to group policy. Your answer was satisfactory.
Where can I apply filtering in security setting?

 

[Mark Heitbrink [MVP]]

Hi,

You know I am new to group policy. Your answer was satisfactory.
Where can I apply filtering in security setting?

Take a look at the GPMC, that is much easier than working with dsa.msc.
http://www.microsoft.com/windowsserver2003/gpmc/default.mspx

"Administering Group Policy with the GPMC"
http://www.microsoft.com/windowsserver2003/gpmc/gpmcwp.mspx

Mark

 

[Norbert Fehlauer [MVP]]

Bijan Kianifard wrote:
Hi,

Where can I apply filtering in security setting?

Without knowing how to work with GPOs I wouldn't recommend security
filtering. It's way easier to structurize your AD then to apply a lot of
security filters at one level.

HTH
Norbert