Are you placing the IT user's accounts in that OU? Group policy only
affects the objects that are in the direct scope of influence.
Placing a security or distribution group within the OU won't do what you're
thinking it will---security groups are really only good for filtering in the
"Security" tab of the policy
You did configure a User policy, correct?... and give it time to replicate
to other DC's.... and time for the computer to realize there's a GPO
awaiting that user. If you've done all that, and doing a gpupdate /force
/sync doesn't get the computer to apply the policy, it would sound like a
DNS issue. Ensure you're not pointing the computer to any other DNS server
other than your DC(s)
Want to reply to this thread or ask your own question?
You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.