Built in "Computers OU"

jbaello

Can anyone tell me why the build in "Computers OU" in AD 2003 is unable to apply GPO?

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

Sie

Thats because its not an OU

JdotQ

Like Sie mentioned, it's not an organizational unit, it's a container -- just like the "Users" container. Group Policies can only be applied to organizational units, not containers.

sprkymrk

JdotQ wrote:

Like Sie mentioned, it's not an organizational unit, it's a container -- just like the "Users" container. Group Policies can only be applied to organizational units, not containers.

They can be applied to OU's, Sites, or Domains. Or individual computers/users as well, as in Local Group Policy.

ajs1976

http://support.microsoft.com/kb/324949

jbaello

Sorry for the little typo here, I meant to say container, I get mixed up with this two sometimes

, I am aware of GPO application to an OU, Domain Level, Sites as well local GPO on client Computers/Users.

I guess this answers my question then, GPO just cannot be applied with container even if you assign it on the site level or domain level, I had an assumption that it will inherit it cause I did not block policy inheritance on Domain Level, so it's kind of confusing.

Thanks, you guys rock!!!

JdotQ

sprkymrk wrote:

JdotQ wrote:

Like Sie mentioned, it's not an organizational unit, it's a container -- just like the "Users" container. Group Policies can only be applied to organizational units, not containers.

They can be applied to OU's, Sites, or Domains. Or individual computers/users as well, as in Local Group Policy.

Thanks for expanding on my very limited classification of GPO application, Mark!

sprkymrk

JdotQ wrote:

sprkymrk wrote:

JdotQ wrote:

Like Sie mentioned, it's not an organizational unit, it's a container -- just like the "Users" container. Group Policies can only be applied to organizational units, not containers.

They can be applied to OU's, Sites, or Domains. Or individual computers/users as well, as in Local Group Policy.

Thanks for expanding on my very limited classification of GPO application, Mark!

You already knew that.

I knew what you meant, but was just clarifying for other readers.