Can a GPO created in Computer configuration/Admin Template/system/user policies be linked to a users OU

I created a GPO that I only want applied to users that are in two OU's.  I linked the GPO to the OU's.  Ran Gpupdate /force on the users computer.  Ran Gpresult /r on the users computers, put it's not getting applied.

Is this possible?  If so how?
J.R. SitmanIT DirectorAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Gabriel CliftonNet AdminCommented:
Make sure "Authenticated Users" is in the Security Filtering.
0
J.R. SitmanIT DirectorAuthor Commented:
it is.  see attached
gpo2.png
0
Sekar ChinnakannuStaff EngineerCommented:
did you tried to block the inheritance and give a try, may be other policy overriding this policy.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

SreRajCommented:
Hi,

Please confirm that you defined settings in GPO in 'User Configuration' part of the GPO. And you should be logged in to the user computer with a user account which is in one of those two OUs and then run GPResult /r
0
Joshua GrantomSenior Systems AdministratorCommented:
No it cannot.

jrsitman! Hey is this about the same policy we were just talking about?
0
J.R. SitmanIT DirectorAuthor Commented:
@joshua G  yes.  I was hoping there was another way to accomplish this.
0
J.R. SitmanIT DirectorAuthor Commented:
@SreRaj, the GPO is a computer configuration.

@joshua G.  You going to help?
0
Joshua GrantomSenior Systems AdministratorCommented:
There isn't a way to make it work the way you want because it changes a registry entry under HKEY Local Machine. If there is a way, I can't think of it.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Gabriel CliftonNet AdminCommented:
A user group policy that has a computer configuration to modify HKLM should still work, usually with a gpupdate as targeted user, reboot to get policy, log in as target user to apply policy, and reboot to make it effective. I have done that before and it has worked. Although you typically want a computer GPO in a computer OU, it is possible.
0
Joshua GrantomSenior Systems AdministratorCommented:
Ok Gabriel,

He has listed the policy he needs, help him out.

This setting is a global setting for HKLM but have at it
0
J.R. SitmanIT DirectorAuthor Commented:
In the "user" policies the items I want to configure don't exist.  they are only in the "computer' policy.  So I believe Joshua G is correct.
0
Gabriel CliftonNet AdminCommented:
OK, let me see if I follow this correctly first. You have a GPO under a user OU that modifies computer configuration registry key under HKLM. Is that correct? If not can you explain it to me better.
0
Joshua GrantomSenior Systems AdministratorCommented:
The policies he is referring to are in here

Computer Configuration/Admin Template/System/User Policies

gpo-settings.png
0
J.R. SitmanIT DirectorAuthor Commented:
Joshua G is correct.
0
Gabriel CliftonNet AdminCommented:
Ok, I have created a test GPO with those settings, the policy applied, but not the settings. Doing some research, the settings in that section MUST be applied to a computer OU.
0
J.R. SitmanIT DirectorAuthor Commented:
ok, let me know if you figure it out
0
J.R. SitmanIT DirectorAuthor Commented:
Thanks
0
J.R. SitmanIT DirectorAuthor Commented:
Thanks
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.