Moving Computers to OUs

Posted on 2004-10-23
Last Modified: 2012-05-05
I would like to know when I need to apply a policy at OU level for computers A,B,C,D,E,F  then I need to apply a different policy at a different OU for computers A,C. Where I should move the computers A and C to the first OU or the second.


OU First:        PolicyOne
Computers A,B,C,D,E,F

OU Second: PolicyTwo
Computers A,C

Question by:Chuckbuchan
    LVL 15

    Expert Comment

    Hi Chuckbuchan,
    You can put OUs within other OUs.  So, what you would do is:

    . Root

    -- OU First  (apply policy here)
       Computers B,D,E,F

       +--- OU Second (apply policy here)
       Computers A,C

    Basically - put the second OU inside the first one.  Apply your main policy to the first OU, and in the Second OU you only need to select those options that differ from the GPO in the first one.
    Does that make sense?

    Author Comment

    I understand , you are talking about child OU?

    Author Comment

    Well, if I already have different independent OUs with computers in them, do I have to restructure them so that They become OUs--->Child OUs structure, in order to comply with the example I mentioned above?
    LVL 15

    Accepted Solution

    Yup - that's what I'm talking about, I just couldn't think of the word :-)

    A computer can only be a member of one OU.  If you want to apply group policies at an OU level, then you'll need to make sure that the computers are a member of the relevant OU.

    You could of course develop an entirely seperate Group Policy for the second OU that contains only computers A & C.  Would that work in your environment?
    LVL 15

    Expert Comment

    Glad I could help :-)

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone. Privacy Policy Terms of Use

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Starting in Windows Server 2008, Microsoft introduced the Group Policy Central Store. This automatically replicating location allows IT administrators to have the latest and greatest Group Policy (GP) configuration settings available. Let’s expl…
    Article by: IanTh
    Hi Guys After a whole weekend getting wake on lan over the internet working, I thought I would share the experience. Your firewall has to have a port forward for port 9 udp to your local broadcast x.x.x.255 but if that doesnt work, do it to a …
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

    875 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now