• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 288
  • Last Modified:

Basic GPO questions

Hello AD experts!

I was hoping someone could help me out with some basic GPO questions I had...

i) From what I understand, there are two types of Group Policies; User Config and Computer Config. User config is settings that are centred around the user, and can be applied to the OU that the specificed users reside in

ii) Computer config relate to settings for the machine, and are applied to the OU the target computer resides in

iii) If you want to apply a User Config for specificed target machines (e.g. a specific OU), you use LoopBack

iv) Is it possible to have one GPO that contains both User Config and Computer Config? If so, how would you apply it?

v) A User Config GPO cannot be applied to a computer OU (unless loopback is set). Likewise, a Computer Config OU cannot be set for a user OU

vi) What is GPO linking?



0
kam_uk
Asked:
kam_uk
3 Solutions
 
Brian PiercePhotographerCommented:
Your understanding is basically correct.
The user Config is applied based on the OU the user account us in
The computer config is applied based on the OU the computer account is in

OU linking referrs toattaching the polices to containers. You can create a GPO and then once created you link (or attach) it to the domain or OU, or indeed you can create a link to apply policies to multiple OUs
0
 
enzogoyCommented:
More explaination about the Link OU if you needed:
http://www.petri.co.il/working_with_group_policy.htm
0
 
kam_ukAuthor Commented:
So, out of curiosity, can you have one GPO that contains both User and Computer config?
0
 
questionCommented:
Yes.. you can. Always computer policies are over ridden by user policies if there is a difference.. if its not different it will be a combination of all rules.
0
 
Brian PiercePhotographerCommented:
Yes - indeed its quite common to do so. Where polices are linked to the domain for example both the computer and user settings will be applied (in that order), since the computer account and user account are both in the linked object (the domain),
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now