Little OU Question

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

Afternoon everyone, just a little question on OUs and GPOs

From the attached image;

If "Test User 1" was in the group "Test Group 1" would you expect the "Test GPO" to be applied?

 

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

Yes, If I understand diagram correctly. However you would need to look at the GPO processing order to see if there are any conflicts and which policy setting is being applied.

Just re looked at the diagram and I've changed my mind. I've now confused myself.

 

Thanks Simon, it's been way to long since I touched this stuff I was starting to doubt if I was remembering it wrong

 

See my edit. It's been a while for me too!

 

no probs

 

I'll stand by my original comments. GPO will apply as there is only a single GPO in use in the diagram! These are no identified GPO's in the User OU, so it is simply acting as a container for the accounts. As the Group is assigned to OU2 then the Test GPO will be applied to Test User1.

 

edit:

Ignore me, I saw OU and though Open University.

 

Thanks again Simon

 

edit: I mis-read the test group 1 for a container.

Rather than putting the user in that group, you could setup two user OU's - one for which you didn't want the policy on, and another for which you do.

 

I woudn't be applied to the user, you can't apply GPOs's to groups in the way shown in the diagram. You would need to set a GPO at an OU above all the user who make up the group, then remove the Authenticated users from the applies to section of the GPO, and replace with the Test Users group.

 

No, this is because only users and computers receive GPO settings, they are not applied to groups

You can test this by using rsop or gpresult after recreating this setup

 

should mention

if you did want a GPO to essentially only work with a specific group of accounts then you would have to apply it to the users/computers OU and use filtering to only apply it to that group.

 

Oops didnt see your post! Exactly this

 

Thanks lads

 

Literally I don’t idea about this, but I am happy to see its answer above which gave other forum members.