Solved

How do you know whether or not to apply a GPO to a computer or user account (ou)?

Posted on 2006-11-28
4
214 Views
Last Modified: 2012-05-05
Question:  I have several GPO's set up, and the only ones that seem to be getting applied are the ones that only have User Settings configured.  

The ones that have Computer Settings configured such as my Firewall policy and Automatic Update policy do not seem to be getting applied.

Do those policies need to be applied to the computer OU rather than the user OU?

Thanks for the help.

Chris
0
Comment
Question by:caw01
  • 2
4 Comments
 
LVL 6

Accepted Solution

by:
d50041 earned 250 total points
ID: 18030364
GPO's only get applied to the OUs that they are linked to.  If you have separate OUs for users and computers ( I do ) then a GPO for computers must be linked to the OU or OUs that the computers are in.  If you have computer settings in a GPO linked to an OU with users and no computers than there are no computers to apply the GPO to.
0
 
LVL 25

Assisted Solution

by:mikeleebrla
mikeleebrla earned 250 total points
ID: 18030366
>>Do those policies need to be applied to the computer OU rather than the user OU?
of course they do.  If you apply a computer GPO to an OU that only contains users then it will never be applied.  Think about it... how could it be applied if there are no computer objects in the OU that you applied it to.



0
 

Author Comment

by:caw01
ID: 18030381
Just checking...Thanks for the answer
0
 
LVL 6

Expert Comment

by:d50041
ID: 18030398
and then ??
0

Featured Post

U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

679 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question