Solved

How do I apply a group policy to an OU with computers?

Posted on 2016-08-30
4
37 Views
Last Modified: 2016-08-31
I'm sure this is easy, but I can't figure it out.  I have a GPO called "_DevAuditLogging" with settings for logging.  (i.e. audit object access, security log size)

I have one server in an OU called "Dev Servers"

When I link the GPO to the Dev Servers it doesn't apply.  I tried the "Group Policy Results" report and it doesn't show up for the computer.  Also, I try "gpupdate /force" on the machine and it doesn't get the changes.  What gives?
0
Comment
Question by:Tim Phillips
  • 2
4 Comments
 
LVL 16

Expert Comment

by:Learnctx
ID: 41777395
Have a look in Event Viewer. It will tell you why the GPO did not apply.

Eventvwr > Applications and Services Logs > Microsoft > Windows > Group Policy > Operational
0
 
LVL 18

Accepted Solution

by:
Sushil Sonawane earned 500 total points
ID: 41777544
0
 
LVL 6

Author Comment

by:Tim Phillips
ID: 41778238
@Learnctx I didn't see anything in the event log at the location you specified.

@Sushil using those links I can verify that the GPO is not being applied to the computer, but I already know that.

I'm thinking that my configuration is wrong somehow.  The GPO doesn't have anything in the "security filtering" portion of the scope.  Is that a problem?  I figured that would just narrow down which computers it applies to, but I want it to apply to the whole group.
0
 
LVL 6

Author Comment

by:Tim Phillips
ID: 41778292
I figured it out.  I had removed "Authenticated Users" from the scope filtering section and I think that removed "Authenticated Users" from the Delegation Tab.  When I was in the Delegation Tab there was no mention of the anything containing the server in question.  I added a group that the server was in and added the permission "Apply Group Policy" and then it worked!
0

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
Script is being strange 8 50
ADMT Intra Forest migration questions 7 78
Restore DNS Record 5 46
ACTIVE DIRECTORY 17 18
Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
In this Micro Tutorial viewers will learn how they can get their files copied out from their unbootable system without need to use recovery services. As an example non-bootable Windows 2012R2 installation is used which has boot problems.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now