• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 53
  • Last Modified:

Can a GPO created in Computer configuration/Admin Template/system/user policies be linked to a users OU

I created a GPO that I only want applied to users that are in two OU's.  I linked the GPO to the OU's.  Ran Gpupdate /force on the users computer.  Ran Gpresult /r on the users computers, put it's not getting applied.

Is this possible?  If so how?
0
J.R. Sitman
Asked:
J.R. Sitman
  • 8
  • 4
  • 4
  • +2
1 Solution
 
Gabriel CliftonCommented:
Make sure "Authenticated Users" is in the Security Filtering.
0
 
J.R. SitmanAuthor Commented:
it is.  see attached
gpo2.png
0
 
Sekar ChinnakannuStaff EngineerCommented:
did you tried to block the inheritance and give a try, may be other policy overriding this policy.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
SreRajCommented:
Hi,

Please confirm that you defined settings in GPO in 'User Configuration' part of the GPO. And you should be logged in to the user computer with a user account which is in one of those two OUs and then run GPResult /r
0
 
Joshua GrantomSenior EngineerCommented:
No it cannot.

jrsitman! Hey is this about the same policy we were just talking about?
0
 
J.R. SitmanAuthor Commented:
@joshua G  yes.  I was hoping there was another way to accomplish this.
0
 
J.R. SitmanAuthor Commented:
@SreRaj, the GPO is a computer configuration.

@joshua G.  You going to help?
0
 
Joshua GrantomSenior EngineerCommented:
There isn't a way to make it work the way you want because it changes a registry entry under HKEY Local Machine. If there is a way, I can't think of it.
0
 
Gabriel CliftonCommented:
A user group policy that has a computer configuration to modify HKLM should still work, usually with a gpupdate as targeted user, reboot to get policy, log in as target user to apply policy, and reboot to make it effective. I have done that before and it has worked. Although you typically want a computer GPO in a computer OU, it is possible.
0
 
Joshua GrantomSenior EngineerCommented:
Ok Gabriel,

He has listed the policy he needs, help him out.

This setting is a global setting for HKLM but have at it
0
 
J.R. SitmanAuthor Commented:
In the "user" policies the items I want to configure don't exist.  they are only in the "computer' policy.  So I believe Joshua G is correct.
0
 
Gabriel CliftonCommented:
OK, let me see if I follow this correctly first. You have a GPO under a user OU that modifies computer configuration registry key under HKLM. Is that correct? If not can you explain it to me better.
0
 
Joshua GrantomSenior EngineerCommented:
The policies he is referring to are in here

Computer Configuration/Admin Template/System/User Policies

gpo-settings.png
0
 
J.R. SitmanAuthor Commented:
Joshua G is correct.
0
 
Gabriel CliftonCommented:
Ok, I have created a test GPO with those settings, the policy applied, but not the settings. Doing some research, the settings in that section MUST be applied to a computer OU.
0
 
J.R. SitmanAuthor Commented:
ok, let me know if you figure it out
0
 
J.R. SitmanAuthor Commented:
Thanks
0
 
J.R. SitmanAuthor Commented:
Thanks
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 8
  • 4
  • 4
  • +2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now