Group Policies applying to Machines

  • Thread starter Thread starter techjohnny
  • Start date Start date
T

techjohnny

Hello:

If I create a OU and group policy that applies to that OU, then I add
the machine to that OU and enforce and block inheritance. Shouldn't
that make it so that any user logging into that computer has both USER
and COMPUTER setting applied?

For some reason, the only setting being applied is Computer settings,
and not user setting?

Thanks,

--TJ
 
In
Hello:

If I create a OU and group policy that applies to that OU, then I add
the machine to that OU and enforce and block inheritance. Shouldn't
that make it so that any user logging into that computer has both USER
and COMPUTER setting applied?

For some reason, the only setting being applied is Computer settings,
and not user setting?

Thanks,

--TJ
Click to expand...

I'm presuming that the user isn't in the OU with the policy inheritance
blocked. If so, this makes sense.
 
Group Policy applies only to users and computers within the scope of
influence of the Group Policy. In your case their are no users in the OU so
you are experiencing expected behavior. Block inheritance simply means that
Group Policy settings applied to the user/computer from GPOs above the OU
container will not apply to the user/computer in the container unless one of
those GPOs is configured with "no override". Now there is an exception that
may do what you want. If you enable "loopback processing" of Group Policy in
computer configuration of the GPO linked to the OU then user settings
configured in that GPO will apply to users that logon to computers in that
OU in a merge or replace mode. This is commonly done for terminal servers,
public computers, and kiosks. The link below explains more and how to do
such. --- Steve

http://technet2.microsoft.com/Windo...975f-4b2f-b771-9e6a903e97db1033.mspx?mfr=true
 
Perfect! Now all users have the same configuration logging into the
computers in this OU, exactly what I desired.

Thanks,

--TJ
 
Back
Top