Group Policy Application Problem

[Guest]

Hi,

I am a fairly new network admin and i am trying to use Group Policy on our
network for the first time. I have a SUS server set up and now i want to use
a GP to make my clients use it.

The SUS server is set up and working properly. I can use a local group
policy and Windows Update looks to the SUS to update. Also, if i modify the
"Default Domain Policy" which lives under the domain in Active Dir., it will
apply those settings to a computer and Windows Update will work as well.

However, when i create a "test" OU and then put a test computer in a group
within it, a group policy attached to that OU is not applied to the test
computer.

Am i missing something fundamental in the GPO setup? I really want to begin
to use GPs in our network but dont want have to apply policies to the whole
network!

Thanks for any help,
brian

 

[Danny Sanders]

However, when i create a "test" OU and then put a test computer in a group

within it, a group policy attached to that OU is not applied to the test
computer.

Don't put the computer in a group.


hth
DDS W 2k MVP MCSE

 

[ptwilliams]

You either need to move the computer object itself into the OU that you
linked the GPO to, or you need to modify the GPOs permissions so that the
group your computer is in has apply policy permission.

You cannot apply policy to a group. You link and therefore apply policy to
containers, domain, site or OU. If you wish to apply to groups, you must
link to a container that all the applicable machines and users reside in and
filter the policy to apply only to specific groups.

-- http://www.msresource.net/content/view/15/47/


--

Paul Williams

http://www.msresource.net
http://forums.msresource.net

However, when i create a "test" OU and then put a test computer in a group
within it, a group policy attached to that OU is not applied to the test
computer.

Don't put the computer in a group.


hth
DDS W 2k MVP MCSE