Why GPO only affects certain users?
Hello,
My DC with AD is running off a w2k server box, i have 10 users in an OU. I linked a GPO to that OU and it works on some users in the OU and not on others. All users are running winxp sp2.
any ideas?
Software/Hardware used:
Software/Hardware used:
ASKED:
August 16, 2005 3:23 PM
UPDATED:
August 16, 2005 4:23 PM
Answer Wiki:
You can decide which groups of computers and users a particular GPO influences . To do this, you use the Security property page of a given GPO to set access permissions (discretionary access control lists , or DACLs) to allow or deny access to the GPO by specified groups.
The Security tab is accessible by right-clicking the root node in the Group Policy snap-in, clicking Properties, and then Security. Or from the Properties page of a given site domain, or OU, select the Group Policy tab, right-click the appropriate Group Policy object in the GPO list, select Properties, and then click Security.
Both Read and Allow Group Policy ACEs are required for a GPO to apply to a group or users in OU.
To see all answers submitted to the Answer Wiki: View Answer History.
but the security is set for authenticated users to read and apply GPO, shouldnt that apply it to all who log in?
Yes, it should apply for users in respective OU. Otherwise you may use Group Policy loopback option to apply also to users not in OU but who log to OU’s member computers.