Solved

Group Policy fails to apply, cant find OU

Posted on 2014-11-27
6
133 Views
Last Modified: 2014-12-21
Hello,
I have a setup with an AD and Exchange 2013. All users and domains are setup through Exchange to keep premissions right.
I just started to apply GPO to my setup, but if I move a computer to an OU and apply a GPO to that computer it fails in computer policy, when running GPUPDATE.
Also if I make a GPO in a OU and apply a user/group to the GPO it fails in the USER policy, when running gpupdate.

The error is someting like: (Translated)
Group policy failed. Windows could not find the folder object OU=NAME, OU=NAME2, DC=NAME3, DC=NAME4

Anyone know why this is failing...? I think it has something to do with premissions or something.

Thanks.
0
Comment
Question by:Jesper Andersen
  • 4
  • 2
6 Comments
 
LVL 13

Expert Comment

by:imkottees
ID: 40468976
0
 

Author Comment

by:Jesper Andersen
ID: 40468983
I forgot to tell that it is on a Windows 2012 R2 Terminal server that I am getting these errors...
0
 
LVL 13

Expert Comment

by:imkottees
ID: 40468986
did you try from a domain controller? if not I would request you to give a try.
0
Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

 

Author Comment

by:Jesper Andersen
ID: 40469005
I create the GPO's on my AD1 server, run a GP update and everything is fine.
Switching to my Terminal server, run a gpupdate and then its fails either in user policy or computer policy.
0
 

Accepted Solution

by:
Jesper Andersen earned 0 total points
ID: 40502411
Found the solution... Authenticated Users was removed from the OU. Everything works fine now. Closing.
0
 

Author Closing Comment

by:Jesper Andersen
ID: 40511439
I found the solution myself.
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
Lockdown of laptops 10 38
Active directory upgrade to DFSR 4 28
Roaming profile & Office 365 3 32
ACTIVE DIRECTORY 17 10
There are two modes of restricted groups GPOs. Replacing mode:   Additive mode:   How do they work? Replacing mode: Everything (users, groups, computers) that is member of the local administrators group will be cleared out. After th…
Starting in Windows Server 2008, Microsoft introduced the Group Policy Central Store. This automatically replicating location allows IT administrators to have the latest and greatest Group Policy (GP) configuration settings available. Let’s expl…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now