Solved

Group Policy on OU with groups in it

Posted on 2002-03-20
9
371 Views
Last Modified: 2010-04-14
I'm trying to apply a group policy on an OU with security groups in it and no users in it. However the client computer doesn't apply the group policy when I use groups, when I put the user in the OU the group policy works fine. I've found a document on the Microsoft Support Site concerning this problem. But the solution they offer doesn't work. Any other idea's?

The document is Q220822.

Looking forward to a great answer.
0
Comment
Question by:Aico
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
9 Comments
 
LVL 17

Expert Comment

by:mikecr
ID: 6882390
Try adding the groups to the security tab in the properties of the OU and check the box that says apply group policy on the right and let me know if that works.
0
 
LVL 3

Author Comment

by:Aico
ID: 6882416
I already did that, but it doesn't work. I've also reset the permissions on all child objects, but no effect. By the way, quick answer!
0
 
LVL 5

Expert Comment

by:matt023
ID: 6883375
I don't think this will work.  If a user account is in another OU or the Users container, the GPO from that OU or the domain GPO will apply.  The GPO in the OU that you set for the group will not apply unless the user account is also in that OU.
0
Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

 
LVL 3

Author Comment

by:Aico
ID: 6883641
But the document states that it is possible. How do you explain that?
0
 
LVL 17

Expert Comment

by:mikecr
ID: 6885297
There is a valid point there. If you have a domain policy and an OU policy dictating different things and the groups reside in one OU and the users in another, the domain policy will win out unless you change the options on it to not inherit.
0
 
LVL 3

Author Comment

by:Aico
ID: 6885369
So what you are saying is that this should work if I stop the inheritance of the domain policy? I've tried disabling the domain policy, but this didn't work. I'll try the inheritance option and let you know.
0
 
LVL 17

Accepted Solution

by:
mikecr earned 200 total points
ID: 6888377
Yes, check the box in options for no overide and this should work.
0
 
LVL 3

Author Comment

by:Aico
ID: 6896471
I've got another one for you! Any experience with Exchange 2000 in a Windows 2000 cluster? Take a swing at it. Same topic area as this one.
0
 
LVL 17

Expert Comment

by:mikecr
ID: 6897034
Sorry, can't help you with that one, not used to a cluster environment.
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
This article shows how to use a free utility called 'Parkdale' to easily test the performance and benchmark any Hard Drive(s) installed in your computer. We also look at RAM Disks and their speed comparisons.
This is a high-level webinar that covers the history of enterprise open source database use. It addresses both the advantages companies see in using open source database technologies, as well as the fears and reservations they might have. In this…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question