Solved

AD OU doesn't show up in Group Policy

Posted on 2013-06-18
1
910 Views
Last Modified: 2013-06-18
Domain Functional Level: Win Server 2003

I'm trying to exclude my servers from my (very simple) Windows Update GPO.  (I don't want them to auto-restart at 3am.)  The easiest solution seems to be to assign the GPO to specific Organizational Units, as I do with all my other GPOs.  However, I am now realizing that not all my OUs available in Active Directory show up in Group Policy.  Specifically, my "Computers" OU is not there.  

Can I rectify this? ...if not, any suggestions for how to separate my servers from my workstations so that I can assign my Windows Update GPO accordingly?
Thanks!
0
Comment
Question by:cuiinc
1 Comment
 
LVL 15

Accepted Solution

by:
Rob Stone earned 500 total points
ID: 39257242
It's because it's not an OU, but a container, as is Users.

You'll need to create an OU and move the computers/users to respective OU's.

I would look to move the servers into a Servers OU, otherwise you will need to look at a WMI filter or deny access to the computer accounts for that policy (I'd advise against this last option though!).
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Move FSMO roles... 9 37
upgrade exchange 2013 CU7 to CU15 9 55
Measure time after installing Antivirus 8 50
Removing Exchange 2003 3 11
This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
This article explains the steps required to use the default Photos screensaver to display branding/corporate images
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

680 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question