1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Little OU Question

Discussion in 'Software' started by ThomasMc, Mar 30, 2011.

  1. ThomasMc

    ThomasMc Gigabyte Poster

    1,507
    49
    111
    Afternoon everyone, just a little question on OUs and GPOs :)

    From the attached image;

    If "Test User 1" was in the group "Test Group 1" would you expect the "Test GPO" to be applied?
     

    Attached Files:

    Certifications: MCDST|FtOCC
    WIP: MCSA(70-270|70-290|70-291)
  2. simongrahamuk
    Honorary Member

    simongrahamuk Hmmmmmmm?

    6,199
    125
    199
    Yes, If I understand diagram correctly. However you would need to look at the GPO processing order to see if there are any conflicts and which policy setting is being applied.

    Just re looked at the diagram and I've changed my mind. I've now confused myself.
     
    Last edited: Mar 30, 2011
  3. ThomasMc

    ThomasMc Gigabyte Poster

    1,507
    49
    111
    Thanks Simon, it's been way to long since I touched this stuff I was starting to doubt if I was remembering it wrong
     
    Certifications: MCDST|FtOCC
    WIP: MCSA(70-270|70-290|70-291)
  4. simongrahamuk
    Honorary Member

    simongrahamuk Hmmmmmmm?

    6,199
    125
    199
    See my edit. It's been a while for me too!

    :biggrin
     
  5. ThomasMc

    ThomasMc Gigabyte Poster

    1,507
    49
    111
    :D no probs
     
    Certifications: MCDST|FtOCC
    WIP: MCSA(70-270|70-290|70-291)
  6. simongrahamuk
    Honorary Member

    simongrahamuk Hmmmmmmm?

    6,199
    125
    199
    I'll stand by my original comments. GPO will apply as there is only a single GPO in use in the diagram! These are no identified GPO's in the User OU, so it is simply acting as a container for the accounts. As the Group is assigned to OU2 then the Test GPO will be applied to Test User1.

    :biggrin
     
  7. Modey

    Modey Terabyte Poster

    2,397
    99
    154
    edit:

    Ignore me, I saw OU and though Open University. :)
     
    Certifications: A+, N+, MCP, MCDST, MCSA 2K3, MCTS, MOS, MTA, MCT, MCITP:EDST7, MCSA W7, Citrix CCA, ITIL Foundation
    WIP: Nada
  8. ThomasMc

    ThomasMc Gigabyte Poster

    1,507
    49
    111
    Thanks again Simon :)
     
    Certifications: MCDST|FtOCC
    WIP: MCSA(70-270|70-290|70-291)
  9. Apexes

    Apexes Gigabyte Poster

    1,053
    78
    141
    edit: I mis-read the test group 1 for a container.

    Rather than putting the user in that group, you could setup two user OU's - one for which you didn't want the policy on, and another for which you do.
     
    Last edited: Mar 30, 2011
    Certifications: 70-243 MCTS: ConfigMgr 2012 | MCSE: Private Cloud
  10. DC Pr0Mo

    DC Pr0Mo Kilobyte Poster

    265
    6
    41
    I woudn't be applied to the user, you can't apply GPOs's to groups in the way shown in the diagram. You would need to set a GPO at an OU above all the user who make up the group, then remove the Authenticated users from the applies to section of the GPO, and replace with the Test Users group.
     
    Certifications: MCDST | BSc Network Computing
    WIP: 70-291 | 70-293 | 70-294 | 70-297
  11. kevicho

    kevicho Gigabyte Poster

    1,219
    58
    116
    No, this is because only users and computers receive GPO settings, they are not applied to groups

    You can test this by using rsop or gpresult after recreating this setup
     
    Certifications: A+, Net+, MCSA Server 2003, 2008, Windows XP & 7 , ITIL V3 Foundation
    WIP: CCNA Renewal
  12. kevicho

    kevicho Gigabyte Poster

    1,219
    58
    116
    should mention

    if you did want a GPO to essentially only work with a specific group of accounts then you would have to apply it to the users/computers OU and use filtering to only apply it to that group.
     
    Certifications: A+, Net+, MCSA Server 2003, 2008, Windows XP & 7 , ITIL V3 Foundation
    WIP: CCNA Renewal
  13. kevicho

    kevicho Gigabyte Poster

    1,219
    58
    116
    Oops didnt see your post! Exactly this
     
    Certifications: A+, Net+, MCSA Server 2003, 2008, Windows XP & 7 , ITIL V3 Foundation
    WIP: CCNA Renewal
  14. ThomasMc

    ThomasMc Gigabyte Poster

    1,507
    49
    111
    Thanks lads :)
     
    Certifications: MCDST|FtOCC
    WIP: MCSA(70-270|70-290|70-291)
  15. Sparky
    Highly Decorated Member Award

    Sparky Zettabyte Poster Moderator

    10,191
    296
    319
    Yup 8)
     
    Certifications: MSc MCSE MCSA:M MCSA:S MCITP:EA MCTS(x5) Security+ Network+ A+
    WIP: Exchange 2007\2010
  16. Jimmy1

    Jimmy1 New Member

    2
    0
    1
    Literally I don’t idea about this, but I am happy to see its answer above which gave other forum members.
     

Share This Page

Loading...