asked on

Active Directory Sites

Hello,

What is the purpose of linking a GPO to a site? What computers, users does a site GPO apply to?

ASKER CERTIFIED SOLUTION

ajcaruso00

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Ciderspine

ASKER

Thanks for you reply - certainly makes things clearer.

Ciderspine

ASKER

So a policy on NY site would apply to a computer that had an IP from the subnet assigned to the NY site? I assume you would have to ensure that the policy settings were not overridden by the same setting in an OU though?

Thanks.

Ciderspine

ASKER

Sorry - that wasn't very clear of me.

So a policy on NY site would apply to a computer that had an IP from the subnet assigned to the NY site? I assume you would have to ensure that a policy linked to a domain or OU did not contest the site policy for it to apply?

ajcaruso00

Exactly - and this is where I encountered the site GPO's this week; they were conflicting with local policies (to map printers to a new print server instead of the old one). I didn't even know you could do this [I'm old-school and still wonder how a Group Policy can't be applied to a security group :-) ]

Have a good one. -T

Ciderspine

ASKER

Thanks.

FYI - polices can be applied to security groups by removing Authenticated Users [apply policy] permission in the security settings of the policy, adding the respective security group and selecting the [apply policy] permission for that goup only. The object you want the policy to affect must of course be within the scope of the policy.

:)