Creating Organizational Units to manage group policies 2

[Tightpants]

I need to set up some group policies to install applications on selected computers, and to control various settings such as the Windows Firewall. I think the easiest way to do this is to create an OU and add the computers to it.

My question is can a computer be a member of multiple OUs?

For example if I have the domain at the top level and create an OU for each application/setting, can I then add the same computer to each of the OUs and leave it in "computers" as well?

 

[fuller772]

Sounds like what you need to do is link each group policy to a particular OU. You can link and enable multiple policies to OU's but a computer can't be a part of multiple OU's.

Place computer1 in an OU.
Find that OU in Group Policy Management Console right-click and hit Link an existing GPO. Add however many GPO you need.

Hope that helps.

 

[Tightpants]

Thanks for the tip. I have created a new OU called "workstations" one level down from the domain. Within "workstations" I have created two child OUs.

Machines which do not require GPOs are now left in the default container "computers". The remaining computers have been moved to the new OUs. GPOs which apply to all workstations are applied to "workstations", and specific settings for particular applications are applied to the child OUs only. This appears to achieve what I am after. Thank you.