Will "Computer Configuration" policies that are applied at the OU level get passed down to computers

  • Thread starter Thread starter Mike Herchel
  • Start date Start date
M

Mike Herchel

I have an OU called Florida that contains all of my users in Florida. If I
attach a Group Policy to this OU that contains Computer Configuration
settings (specifically Windows Update settings), will these settings be
passed down even though the OU does not contain the user's computer?

Thanks!
 
michael.herchel said:
I have an OU called Florida that contains all of my users in Florida. If I
attach a Group Policy to this OU that contains Computer Configuration
settings (specifically Windows Update settings), will these settings be
passed down even though the OU does not contain the user's computer?

Thanks!
Click to expand...
No, you'll need to link a GPO to the OU where your computer accounts
reside. What you see in a GPO under User Configuration is applied *only*
to users (hence it has "user" in the name). Respectively, all settings
under Computer Configuration are applicable only to the computer. So for
these to take effect the GPO must be applied to an OU in/below which the
*computer accounts* reside. Therefore it's a recommended design practice
to disable the Computer configuration part for GPOs that apply only to
users for better performance since it's not used anyway.

HTH
--
Cheers,
Marin Marinov
MCT, MCSE 2003/2000/NT4.0,
MCSE:Security 2003/2000, MCP+I
-
This posting is provided "AS IS" with no warranties, and confers no
rights.
 
Wow. Thanks for the information!


Marin Marinov said:
No, you'll need to link a GPO to the OU where your computer accounts
reside. What you see in a GPO under User Configuration is applied *only*
to users (hence it has "user" in the name). Respectively, all settings
under Computer Configuration are applicable only to the computer. So for
these to take effect the GPO must be applied to an OU in/below which the
*computer accounts* reside. Therefore it's a recommended design practice
to disable the Computer configuration part for GPOs that apply only to
users for better performance since it's not used anyway.

HTH
--
Cheers,
Marin Marinov
MCT, MCSE 2003/2000/NT4.0,
MCSE:Security 2003/2000, MCP+I
-
This posting is provided "AS IS" with no warranties, and confers no
rights.
Click to expand...
 
michael.herchel said:
Wow. Thanks for the information!
Click to expand...
<snip>
You're very welcome ;)

--
Cheers,
Marin Marinov
MCT, MCSE 2003/2000/NT4.0,
MCSE:Security 2003/2000, MCP+I
-
This posting is provided "AS IS" with no warranties, and confers no
rights.
 
Back
Top