I am new to GPO. I would like to apply a policy to specific machines in different OUs and am wondering how to do this. For example.

Machine 1,2,3 are in (security) group 1 (M1,M2,M3,G1)
Machine 4,5,6 are in (security) group 2 (M4,M5,M6,G2)
Odd machines need GPO1 applied to them and even machines need GPO2

I thought if I were to put odd/even machines in different security groups (G1,G2) I would be able to designate the GPO that should apply via Security Filtering. However, this is not the case.

How can/should I approach this issue?

  • Hi. Not really a security question in the context of this forum. Might get better responses on another one. Good luck – ISMSDEV Oct 20 '17 at 18:22
  • @ISMSDEV thanks. any recommendations? this is the one google suggested :/ – Racehorse35 Oct 20 '17 at 18:29
  • Not too sure as I don’t use the others. Server fault I think is for sysadmins – ISMSDEV Oct 20 '17 at 18:54

Computers need to be rebooted to pick up the group membership, or you can use klist -lh 0 -li 0x3e7 purge on the computers to refresh the kerberos tickets and the group memberships.

Also, this would only be applicable for Computer policies. User polices would require enabling User Group Policy Loopback Processing.

For testing purposes, you should also confirm if adding the computer(s) directly to the Scope filtering to confirm if that works. If it does not, the issue is not related to the group memberships.


Don't forget to remove "Autenticated Users" from the security filtering, because all your users AND computers are in "Autenticated Users".

If you don't remove "Authenticated Users", even if you add your groups in the security filtering, they will not filter anything at all...

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.