Group Policy object not applying to OU

Posted on 2012-08-29
Last Modified: 2012-10-24
Hey Experts,
I have a group policy object i am trying to apply to our Terminal Servers.  This object has "User Configuration" settings in it to remove start menu options.  

I have a OU called "Terminal Servers" Which has our Terminal Server computers inside it.  

If i apply the GPO to the OU "Terminal Servers" and Enforce it i do not see the settings applied gpresults does not show anything for the GPO under User Settings but does show the GPO under Computer Settings as Filtering: Not Applied (empty) which would be expected.

If I move the GPO to the domain instead of the OU unit, without changing any security filtering it works correctly and gpresults shows it applied and they are actually applied.  

What would make a GPO not be able to apply to a OU?

This is a 2008R2 Terminal Server.
2003 R2 Domain controller.

Thank you
Question by:tsukraw
    LVL 6

    Accepted Solution

    You will need to enable Loopback Processing for the GPO to apply to the users that log onto the servers. Read up on it here:


    Hope that helps!
    LVL 19

    Expert Comment

    You can also create OU for the users, say terminal server users and make necessary changes and apply.
    LVL 6

    Expert Comment

    You could do that (apply to Users OU), but then those users would always have the restrictions of the terminal server - even when they log onto a normal workstation...

    Featured Post

    Want to promote your upcoming event?

    Is your company attending an event or exhibiting at a trade show soon? Are you speaking at a conference? Spread the word by using a promotional banner in your email signature. This will ensure your organization’s most important contacts are in the know.

    Join & Write a Comment

    I know all systems administrator at some time or another has had to create a script to copy file from a server share to a desktop. Well now there is an easy way to do this in Group Policy. Using Group policy preferences is not hard. The first thing …
    We recently had an issue where out of nowhere, end users started indicating that their logins to our terminal server were just showing a "blank screen." After checking the usual suspects -- profiles, shell=explorer.exe in the registry, userinit.exe,…
    This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
    To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now