RE: [ActiveDir] Group Policy question

[Roger Seielstad]

Title: Message

I am being nice.   Its technically impossible to place a single object into multiple OU's, so the presented scenario can't happen.   GPO's can be filtered by groups, as has been noted before, but you are correct, they're applied to the OU, Site or domain level, not directly to the group. -------------------------------------------------------------- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -----Original Message----- From: Narkinsky, Brian [mailto:[EMAIL PROTECTED] Sent: Monday, July 21, 2003 1:37 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Group Policy question Group Policy  is not applied to Groups.  So Group Policy has nothing to do with Groups.   BE nice if you could ( I think there is a third party Fazam?)   Brian Narkinsky System Manager Department of Environmental Protection MS 6520 2600 Blairstone RD Tallahassee, FL 32399 phone (850)245-8314 fax (850)412-0400       -----Original Message----- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Monday, July 21, 2003 1:29 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Group Policy question   I believe there's nothing in TechNet on it because its technically impossible to do. You can't have an object in more than one OU.     -------------------------------------------------------------- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -----Original Message----- From: Chris Flesher [mailto:[EMAIL PROTECTED] Sent: Monday, July 21, 2003 12:49 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Group Policy question Guido, that's not quite what I had in mind. Two OU's that are not hierarchical to each other. It could be a flat OU architecture. Two seperate OU's that have gpo's applied to a group. If a user is a member of both groups, which gpo will take precedence? Maybe it's a dumb question but it was posed to me by a higher up and I can't find anything about this scenario in technet.     Chris Flesher The University of Chicago NSIT/DCS 1-773-834-8477 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GRILLENMEIER,GUIDO (HP-Germany,ex1) Sent: Monday, July 21, 2003 10:43 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Group Policy question I guess you're using the groups to filter for whom a GPO is applied - but you're not applying a GPO to a group ;-) It doesn't matter which OU the group resides in, it simply matters, which OU the respective GPO is applied to.   Assuming you're talking about applying two GPOs to the same OU - each with a separate Group used for filtering, then you can set the priority of the GPO processing order directly on the OU on the Group Policy tab.   /Guido   From: Chris Flesher [mailto:[EMAIL PROTECTED] Sent: Montag, 21. Juli 2003 17:18 To: [EMAIL PROTECTED] Scenario: a user is a member of two groups. Each group is in a seperate OU. A gpo is applied to each group. Which gpo will take precedence for that user? In other words, which will be the last to be applied and get the settings applied to that user?   Chris Flesher The University of Chicago NSIT/DCS 1-773-834-8477