Group Policy - User and Computer Configuration

slipd · 16 Aug 2012 at 16:16

Hi guys,

When configuring a gp, are computer/user configurations always applied to the ou they are linked to?

I'm having a bit of bother atm getting the computer configuration side of my main gp to apply to my machines... for example, I've disabled help and support center yet it is still able to run

The user side seems fine, everything is working the way it should do! Any ideas?

Deleted member 77746 · 16 Aug 2012 at 17:31

Are the computer objects in the OU where you have assigned the policy?

slipd · 17 Aug 2012 at 08:42

mrbell1984 said:
Are the computer objects in the OU where you have assigned the policy?

That's what I'm thinking... I currently have just one ou (with a linked gp) for my users' accounts and the computers are just in the common computers directory. Should they both be in the same ou?

sidethink · 17 Aug 2012 at 09:18

sam.wheale said:
That's what I'm thinking... I currently have just one ou (with a linked gp) for my users' accounts and the computers are just in the common computers directory. Should they both be in the same ou?

Ultimately the computers need to be in an OU that has the policy attached.

Many organisations will have multiple nested OUs with differing policies applying at each level. That way you can have a baseline policy apply to all objects in the e.g. 'HeadOffice' OU and then within that further separate OUs and discrete policies for e.g. 'SalesStaff' or 'Laptops' etc.

That way you build up a blended but logical policy framework but can still organise objects in meaningful ways.

Deleted member 77746 · 17 Aug 2012 at 09:42

sam.wheale said:
That's what I'm thinking... I currently have just one ou (with a linked gp) for my users' accounts and the computers are just in the common computers directory. Should they both be in the same ou?

Computers are best off in the OU where the GP is so it can be applied at that level rather than linked GP's.

Move the computer objects into the OU with the GP attached and reboot the computers. May need rebooting twice to sometimes pickup the policy.

nrh1703 · 19 Aug 2012 at 22:55

check the group policy modelling wizard (accessed from GPMC) to see which policies and settings are [not] being applied. you can run gpresult on client machines too to show what settings etc the client is getting.