GP - User Configuration not applied

[TheLad]

I have installed two servers into an existing AD as member servers and their Computer Objects are under the OU:

Servers / Terminal Servers

I have also created a User Configuration GPO under that OU with the relevant settings I need to apply to the servers when anyone logs onto them but the policy is not taking effect. I have run a GPRESULT and the policy is not shown under User Configuration as either applied or not applied.

Does anyone have any ideas please?

--------------------------------------
"Insert funny comment in here!"
--------------------------------------

 

[Paulreg]

Are the users in the OU to which you have linked the GPO and have they the read and apply group policy permissions to the GPO ?

 

[TheLad]

The GPO is linked to the location where the servers computer objects are stored. The AD is currently a bit of a mess so users are in several different top level OUs. Authenticated Users is configured to have Read and Apply Group Policy permissions.

--------------------------------------
"Insert funny comment in here!"
--------------------------------------

 

[tom2008]

If you want the GPO to be applied to certain users then it needs to be applied to the OU that those users are in. If you apply the GPO, containing users configuration settings, to an OU than only contains servers then, as you are seeing, it will have no effect.

 

[Paulreg]

Either move the users to the OU to which the GPO is linked or link the GPO to the OUs that contain the users. If you do the latter make sure that there are no other objects in the OUs that will be erroneously affected by the GPO.

 

[TNGPicard]

Loopback Policy Processing will let you apply user settings via GPO's applied on containers with computer objects.

http://support.microsoft.com/kb/231287

 

[Paulreg]

Good point TNGPicard, Loopback will of course apply the user settings of the GPO applied to the Computer OU.