Go Premium for a chance to win a PS4. Enter to Win


Moving Computers to OUs

Posted on 2004-10-23
Medium Priority
Last Modified: 2012-05-05
I would like to know when I need to apply a policy at OU level for computers A,B,C,D,E,F  then I need to apply a different policy at a different OU for computers A,C. Where I should move the computers A and C to the first OU or the second.


OU First:        PolicyOne
Computers A,B,C,D,E,F

OU Second: PolicyTwo
Computers A,C

Question by:Chuckbuchan
  • 3
  • 2
LVL 15

Expert Comment

ID: 12388303
Hi Chuckbuchan,
You can put OUs within other OUs.  So, what you would do is:

. Root

-- OU First  (apply policy here)
   Computers B,D,E,F

   +--- OU Second (apply policy here)
   Computers A,C

Basically - put the second OU inside the first one.  Apply your main policy to the first OU, and in the Second OU you only need to select those options that differ from the GPO in the first one.
Does that make sense?

Author Comment

ID: 12388319
I understand , you are talking about child OU?

Author Comment

ID: 12388403
Well, if I already have different independent OUs with computers in them, do I have to restructure them so that They become OUs--->Child OUs structure, in order to comply with the example I mentioned above?
LVL 15

Accepted Solution

scampgb earned 2000 total points
ID: 12388541
Yup - that's what I'm talking about, I just couldn't think of the word :-)

A computer can only be a member of one OU.  If you want to apply group policies at an OU level, then you'll need to make sure that the computers are a member of the relevant OU.

You could of course develop an entirely seperate Group Policy for the second OU that contains only computers A & C.  Would that work in your environment?
LVL 15

Expert Comment

ID: 12388872
Glad I could help :-)

Featured Post

[Webinar] Cloud Security

In this webinar you will learn:

-Why existing firewall and DMZ architectures are not suited for securing cloud applications
-How to make your enterprise “Cloud Ready”, and fix your aging DMZ architecture
-How to transform your enterprise and become a Cloud Enabler

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you’re involved with your company’s wide area network (WAN), you’ve probably heard about SD-WANs. They’re the “boy wonder” of networking, ostensibly allowing companies to replace expensive MPLS lines with low-cost Internet access. But, are they …
Transferring FSMO roles is done when an admin wants to split roles between certain Domain Controllers or the Domain Controller holding the Roles has been forcefully demoted using dcpromo / forceremoval
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

916 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question