0

I'm having issues with getting my GPO to be pushed out.

Here are the steps that I took.

I created an OU (Workstation OU), in that Workstation OU, I put a Security group (SG-Workstation), and in that security group is a list of all the computers that need to have the GPO applied to.

I configured the GPO (The GPO only has computer configurations, no user configuration) and attached the GPO to the Workstation OU, link enabled and enforced. And changed the security filtering to have the Workstation OU only.

I ran gpupdate /force on both client and server. And checked gpresult to see if I was getting the group policy, and nothing. I rebooted, to see if would get the policy then, and still nothing.

Does anybody have any ideas?

3
  • Thanks for the link, I changed the security filtering to only include Domain Computers but it still was not successful.
    – John Doe
    Oct 17, 2017 at 18:51
  • 1
    If it doesn't reveal too much, a screenshot of the ADUC, and policy might help us see what is going on.
    – Zoredache
    Oct 17, 2017 at 19:00

1 Answer 1

1

You need to link the GPO to the OU that contains the workstations. Based on your question, it sounds like the actual computer objects may be in a different OU.

As an aside, it is generally advised to not use the "Enforced" option except in advanced use cases. The GPO will be applied as long as "Enabled" is...enabled.

3
  • Good catch. I missed that in the question. The computer accounts need to be in the OU that the GPO is linked to.
    – joeqwerty
    Oct 17, 2017 at 21:10
  • That works. I was trying to assign it to a separate OU that has an SG with all the computers in it so I wouldn't have to move any of the machines out of their current OU's or deploy the same GPO on multiple OU's. Thanks
    – John Doe
    Oct 20, 2017 at 18:47
  • You can still apply the gpo to multiple OUs and use security filtering with that group so it doesn't only applies to specific computers.
    – Sam Erde
    Oct 22, 2017 at 13:15

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .