Basically my question is do i group computers in security groups then add that group to the policy's security filtering? For some reason i've always though of security groups as appling only to users...

windows 2008 AD windows xp / win 7 machines

thanks in advance!


Check out this article, it should address your needs


and like Joe said, yes you can use groups for computers as well

  • thanks for clearing that up..i tried it out and i did see the policy being applied, but the msi is not being installed ... how do i start troubleshooting? – v-dog Aug 16 '12 at 18:16
  • @v-dog Check the logs. Should almost always be your first troubleshooting step. (In this case, the client logs and/or rsop should point you at why the msi isn't installing.) – HopelessN00b Aug 16 '12 at 18:29
  • Have you rebooted the computer since setting up the GPO? If so, how many times? Software installation only occurs on startup and sometimes requires several reboots. – joeqwerty Aug 16 '12 at 18:34
  • i'd also check that application event log to make sure the app its self isn't failing for some reason. – Eric C. Singer Aug 16 '12 at 18:52
  • i've rebooted it once, will reboot it again ... no errors in application log ... where do i find the rsop? is there a report on the group policy manager that tells me if the policy was aplied? – v-dog Aug 16 '12 at 19:20

Yes, you can use a security group populated with computer accounts to filter Group Policy.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.