Group Policy on Specific Container

I created a new group Policy on a specific OU...    I am assuming that all computers in this OU should have this policy applied.   However it does not.

Is the domain policy overriding or should it apply both?    I am hoping it should apply both.
LVL 2
Zoldy2000Asked:
Who is Participating?
 
every1isevil2Connect With a Mentor Commented:
forgot to add have you done gpupdate /force on the workstation and run gp modeling  this will project the winning gpo's.  best way to see if the gpo will get applied.  run rsop to see if its getting applied
0
 
every1isevil2Commented:
did u configure the gpo for the user or the settings.  and is the computer or user in that gpo?
0
 
Zoldy2000Author Commented:
authenticated users

the computers are in the OU
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
every1isevil2Commented:
auth users is that specified in the security filter? and the computers are not in the default container?
0
 
Zoldy2000Author Commented:
sorry I confused things....    the auth users is the security filter.    

The computers are in this specific container on which I created the policy

I ran both commands and it is not applying my policy
0
 
every1isevil2Commented:
double check the gpo that you created and make sure the changes you made are not for the user and for the computer
0
 
Zoldy2000Author Commented:
I don't understand what you are saying user and computer?
0
 
Dangle79Connect With a Mentor Commented:
on the target computer run gpresult, check the computer policy section of the output to see if it sees your GPO and if it's applied or not. if not it will give a reason as to why it was not applied.

also make sure that you don't have a conflicting policy applied higher in the tree. those settings will override yours
0
 
every1isevil2Commented:
if you created a gpo and you made changes to the user settings and you have them linked them to the ou that just have the computer.   your settings will not get applied
0
 
Zoldy2000Author Commented:
Only my default domain policy is applied when I run gpresult.   It does not give a reason why the other one is not applied.  
0
 
Dangle79Commented:
so your policy is not even listed in either the user or computer sections?
0
 
every1isevil2Commented:
is the link enabled?
0
 
Dangle79Commented:
that was going to be my next question, but i think even disabled links show up in gpresult and are indicated as such. not positive about that might try it myself here in a bit =o\
0
 
every1isevil2Commented:
if its disabled it will not show up.  
0
 
Zoldy2000Author Commented:
Sorry I don't with these a lot so it may be something simple I am missing here.  

The link is enable.

When I run the GPresult I don's see it referenced anywhere
0
 
every1isevil2Connect With a Mentor Commented:
gpresults shows applied settings.  if you havent done gpupdate /force on the workstation any changes u make to the gpo the computer will check for changes roughly 60-90 min hence why u do gpupdate /force to get the update manually

check gp modeling  even if the link is disabled it will be listed.  under denied gpo.  

do you have block inheritance on the link between the parent ou and the computers ou? and the gp is linked on the parent ou?  

0
 
Zoldy2000Author Commented:
The only denied policy is the local policy.    

the gp is not linked on the parent ou.    Is this my problem.    I did not think I wanted this because I do not want the policy apply on and other container.

0
 
every1isevil2Commented:
if its on the parent ou the child ous will also get the policy unless its blocked

if u click on the ou.  make sure the linked gpo tab is selected.  and is the gp listed?
if it is please screen shot it  

0
 
Zoldy2000Author Commented:
yes it is listed
Zoldy2000-458359.flv
0
 
Zoldy2000Author Commented:
yes it is listed
0
 
every1isevil2Commented:
is that server another DC? on site?
0
 
Zoldy2000Author Commented:
Here is something interesting ... although the server I was using to test with does not have the policy other servers do....    strange
0
 
every1isevil2Commented:
lol that means that server is not in the ou
0
 
Zoldy2000Author Commented:
but it is
0
 
every1isevil2Connect With a Mentor Commented:
please supply with computer name

and the output of this command

DSQUERY computer OU=Name of the ou,ou=use if needed,DC=name of the domain,DC=Suffix > c:\UsersinOU.TXT
you may have multiple of ous...first out is the child ou the second is its parent and 3rd if needed is is parents parent
0
 
Zoldy2000Author Commented:
came in this morning and everything is now updated as expected.   It seems some updated right away and others took some time.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.