GPO settings not be applied

Posted on 2007-08-01
Last Modified: 2010-04-18
I have created a GPO to add a URL to trusted sites in IE. I used these notes to setup the settings of the GPO
Once I linked the GPO to a test OU and put my desktop in it and allow for replication and log back in, the GPO settings don't take affect.

What did I miss? Thanks.
Question by:locrawler
    LVL 10

    Accepted Solution

    If you have followed the instructions on the page above, the policy will apply to users only, and not to machines. You will need to make sure that you link the GPO to the OU where the users are.

    Author Comment

    yes that worked.  So if the GPO settings are edited for user configuration they have to be applied to user OU's and if GPO setting are edited for computer configuration then it needs to be applied to computer OU's; right?

    Thanks for your help.
    LVL 10

    Expert Comment

    That is correct. If you have a GPO and it only contains User settings then you should disable the Computer section of the GPO and vice/verser - This is just best practice, as if you have a large number of GPO's on your domain logon and boot times can take longer, so disabling the sections that are not required in each GPO will speed up logon/boot times.

    Computer Policies will only apply to computers within an OU and are applied at computer startup (BOOT) and User Policies will only apply to users within an OU and are applied at user logon.

    Author Comment

    Thanks again for your help and explanation.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    I'm sure that every Windows systems administrator has written, or at least used, a batch or VBS login script at some point in their career, whether it is to map network drives, install printers, or set some user preferences.  No more! With Window…
    As network administrators; we know how hard it is to track user’s login/logout using security event log (BTW it is harder now in windows 2008 because user name is always “N/A” in the grid), and most of us either get 3rd party tools, or just make our…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    731 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now