My Active Directory is setup something like this:
etc, with different sites having several OUs setup similar to the above. All of the OUs have a Computer policy in the Computers OU and a Users Policy in the Users OU
I had to setup a new GPO for Windows Updates to point to WSUS server. What I did was Link this "WSUS Update" GPO to a Departments Computers OU. I would like to do this to ALL of our sites, and various OUS, which is close to 100, however this is very time consuming.
Can I just put the "WSUS Update" GPO under the Company OU? How can I make it so all the other OUs will inherit this policy? And How can I block a handful of OUs from receiving this policy?
Yes I know I could continue doing it the long way into each OU, but I'm sure there is a better, faster way.