Solved

AD OU doesn't show up in Group Policy

Posted on 2013-06-18
1
872 Views
Last Modified: 2013-06-18
Domain Functional Level: Win Server 2003

I'm trying to exclude my servers from my (very simple) Windows Update GPO.  (I don't want them to auto-restart at 3am.)  The easiest solution seems to be to assign the GPO to specific Organizational Units, as I do with all my other GPOs.  However, I am now realizing that not all my OUs available in Active Directory show up in Group Policy.  Specifically, my "Computers" OU is not there.  

Can I rectify this? ...if not, any suggestions for how to separate my servers from my workstations so that I can assign my Windows Update GPO accordingly?
Thanks!
0
Comment
Question by:cuiinc
1 Comment
 
LVL 15

Accepted Solution

by:
Rob Stone earned 500 total points
ID: 39257242
It's because it's not an OU, but a container, as is Users.

You'll need to create an OU and move the computers/users to respective OU's.

I would look to move the servers into a Servers OU, otherwise you will need to look at a WMI filter or deny access to the computer accounts for that policy (I'd advise against this last option though!).
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This article explains how to install and use the NTBackup utility that comes with Windows Server.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

816 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now