Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

How do I apply a group policy to an OU with computers?

Posted on 2016-08-30
4
Medium Priority
?
58 Views
Last Modified: 2016-08-31
I'm sure this is easy, but I can't figure it out.  I have a GPO called "_DevAuditLogging" with settings for logging.  (i.e. audit object access, security log size)

I have one server in an OU called "Dev Servers"

When I link the GPO to the Dev Servers it doesn't apply.  I tried the "Group Policy Results" report and it doesn't show up for the computer.  Also, I try "gpupdate /force" on the machine and it doesn't get the changes.  What gives?
0
Comment
Question by:Tim Phillips
  • 2
4 Comments
 
LVL 18

Expert Comment

by:Learnctx
ID: 41777395
Have a look in Event Viewer. It will tell you why the GPO did not apply.

Eventvwr > Applications and Services Logs > Microsoft > Windows > Group Policy > Operational
0
 
LVL 18

Accepted Solution

by:
Sushil Sonawane earned 2000 total points
ID: 41777544
0
 
LVL 6

Author Comment

by:Tim Phillips
ID: 41778238
@Learnctx I didn't see anything in the event log at the location you specified.

@Sushil using those links I can verify that the GPO is not being applied to the computer, but I already know that.

I'm thinking that my configuration is wrong somehow.  The GPO doesn't have anything in the "security filtering" portion of the scope.  Is that a problem?  I figured that would just narrow down which computers it applies to, but I want it to apply to the whole group.
0
 
LVL 6

Author Comment

by:Tim Phillips
ID: 41778292
I figured it out.  I had removed "Authenticated Users" from the scope filtering section and I think that removed "Authenticated Users" from the Delegation Tab.  When I was in the Delegation Tab there was no mention of the anything containing the server in question.  I added a group that the server was in and added the permission "Apply Group Policy" and then it worked!
0

Featured Post

Free Backup Tool for VMware and Hyper-V

Restore full virtual machine or individual guest files from 19 common file systems directly from the backup file. Schedule VM backups with PowerShell scripts. Set desired time, lean back and let the script to notify you via email upon completion.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Active Directory can easily get cluttered with unused service, user and computer accounts. In this article, I will show you the way I like to implement ADCleanup..
Transferring FSMO roles is done when an admin wants to split roles between certain Domain Controllers or the Domain Controller holding the Roles has been forcefully demoted using dcpromo / forceremoval
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.

877 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question