Applying Computer Policy Problems

  • Thread starter Thread starter Ben Blackmore
  • Start date Start date
B

Ben Blackmore

Hi,

I'm having a little trouble with a computer policy. Its for the Windows
Automatic Update client, which I'm trying to connect to our SUS server. The
settings for this are setup in the group policy > computer configuration >
administrative templates > windows components > windows update.

As this is a computer policy adding the user to the group won't apply the
policy. So I have added the computer to the policy, however this does not
work either. The only way I can get the policy to apply to the computer, is
to move the computer out of the Computers OU (in AD) and move it into the
Group OU that has the policy. I don't even have to make the Computer a
member of the group, as long as its in the OU.

This seems a little strange to me, I can't see any reason why you shouldn't
be able to leave the computer in the Computers OU, and make it a member of
several different groups.

Is this working correctly, or am I doing something wrong? Maybe I have some
configuration problem with my AD!

Cheers

Ben
 
This is by design. Policies apply to computer/user objects in their OU (+
related ou in hierarchy). As Computers container is not really a
Organizational Unit, there is no point of leaving computer accounts there.
Move them out of computers OU into your custom OU which has this policy set.

--
Regards

Matjaz Ladava, MCSE, MCSA, MVP
Microsoft MVP - Active Directory
(e-mail address removed), (e-mail address removed)
http://ladava.com
 
So does it not matter about being a member of a group? The problem I've
found today while testing is if the computer is in our 'Test' OU the policy
is applied, and auto update works, however if its also part of the 'Test'
group, it won't apply the policy!
Ben
 
Being a part of a group has no affect on GPO's application.

--
Regards

Matjaz Ladava, MCSE, MCSA, MVP
Microsoft MVP - Active Directory
(e-mail address removed), (e-mail address removed)
http://ladava.com
 
Back
Top