Link to home
Start Free TrialLog in
Avatar of J.R. Sitman
J.R. SitmanFlag for United States of America

asked on

Can a GPO created in Computer configuration/Admin Template/system/user policies be linked to a users OU

I created a GPO that I only want applied to users that are in two OU's.  I linked the GPO to the OU's.  Ran Gpupdate /force on the users computer.  Ran Gpresult /r on the users computers, put it's not getting applied.

Is this possible?  If so how?
Avatar of Gabriel Clifton
Gabriel Clifton
Flag of United States of America image

Make sure "Authenticated Users" is in the Security Filtering.
Avatar of J.R. Sitman

ASKER

it is.  see attached
gpo2.png
Avatar of Sekar Chinnakannu
did you tried to block the inheritance and give a try, may be other policy overriding this policy.
Hi,

Please confirm that you defined settings in GPO in 'User Configuration' part of the GPO. And you should be logged in to the user computer with a user account which is in one of those two OUs and then run GPResult /r
No it cannot.

jrsitman! Hey is this about the same policy we were just talking about?
@joshua G  yes.  I was hoping there was another way to accomplish this.
@SreRaj, the GPO is a computer configuration.

@joshua G.  You going to help?
ASKER CERTIFIED SOLUTION
Avatar of Joshua Grantom
Joshua Grantom
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
A user group policy that has a computer configuration to modify HKLM should still work, usually with a gpupdate as targeted user, reboot to get policy, log in as target user to apply policy, and reboot to make it effective. I have done that before and it has worked. Although you typically want a computer GPO in a computer OU, it is possible.
Ok Gabriel,

He has listed the policy he needs, help him out.

This setting is a global setting for HKLM but have at it
In the "user" policies the items I want to configure don't exist.  they are only in the "computer' policy.  So I believe Joshua G is correct.
OK, let me see if I follow this correctly first. You have a GPO under a user OU that modifies computer configuration registry key under HKLM. Is that correct? If not can you explain it to me better.
The policies he is referring to are in here

Computer Configuration/Admin Template/System/User Policies

User generated image
Joshua G is correct.
Ok, I have created a test GPO with those settings, the policy applied, but not the settings. Doing some research, the settings in that section MUST be applied to a computer OU.
ok, let me know if you figure it out
Thanks
Thanks