troubleshooting Question

GPO Inheritance in Large Active Directory OU Structure

Avatar of fireguy1125
fireguy1125 asked on
Active DirectoryWindows Server 2008
7 Comments2 Solutions610 ViewsLast Modified:
My Active Directory is setup something like this:

Company
-Accounting
---Computers
---Users
-HR
---Computers
---Users
etc, with different sites having several OUs setup similar to the above.  All of the OUs have a Computer policy in the Computers OU and a Users Policy in the Users OU

I had to setup a new GPO for Windows Updates to point to WSUS server. What I did was Link this "WSUS Update" GPO to a Departments Computers OU.  I would like to do this to ALL of our sites, and various OUS, which is close to 100, however this is very time consuming.

Can I just put the "WSUS Update" GPO under the Company OU? How can I make it so all the other OUs will inherit this policy? And How can I block a handful of OUs from receiving this policy?

Yes I know I could continue doing it the long way into each OU, but I'm sure there is a better, faster way.

Thanks.
Join the community to see this answer!
Join our exclusive community to see this answer & millions of others.
Unlock 2 Answers and 7 Comments.
Join the Community
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 2 Answers and 7 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros