Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Basically my question is do i group computers in security groups then add that group to the policy's security filtering? For some reason i've always though of security groups as appling only to users...

windows 2008 AD windows xp / win 7 machines

thanks in advance!

share|improve this question

Check out this article, it should address your needs

and like Joe said, yes you can use groups for computers as well

share|improve this answer
thanks for clearing that up..i tried it out and i did see the policy being applied, but the msi is not being installed ... how do i start troubleshooting? – v-dog Aug 16 '12 at 18:16
@v-dog Check the logs. Should almost always be your first troubleshooting step. (In this case, the client logs and/or rsop should point you at why the msi isn't installing.) – HopelessN00b Aug 16 '12 at 18:29
Have you rebooted the computer since setting up the GPO? If so, how many times? Software installation only occurs on startup and sometimes requires several reboots. – joeqwerty Aug 16 '12 at 18:34
i'd also check that application event log to make sure the app its self isn't failing for some reason. – Eric C. Singer Aug 16 '12 at 18:52
i've rebooted it once, will reboot it again ... no errors in application log ... where do i find the rsop? is there a report on the group policy manager that tells me if the policy was aplied? – v-dog Aug 16 '12 at 19:20

Yes, you can use a security group populated with computer accounts to filter Group Policy.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.