The computer has to be in the OU or sub-OU to which the policy is applied. If you apply the GPO to a higher OU, it will be applied to sub-OU's as well, unless the sub-OU has a GPO that overrides the higher OU, or that prevents other GPO's from being applied. Are there any events in the event viewer of the target machine? If a GPO is not being applied correctly, you will get some errors in the event viewer. You can also running secedit /refreshpolicy machine_policy on the target computer, then reboot it to make sure that group policy is being refreshed.
James Winzenz, MCSE, A+ Associate Systems Administrator Peregrine Systems, Inc. -----Original Message----- From: Morgan, Joshua [mailto:[EMAIL PROTECTED]] Sent: Wednesday, March 13, 2002 3:22 PM To: NT 2000 Discussions Subject: RE: GPO's and Groups Main Question Does the Computer have to be in the OU or a Sub OU on where the CPO is applied? Joshua Morgan PH: (864) 250-1350 Ext 133 Fax: (413) 581-4936 [EMAIL PROTECTED] -----Original Message----- From: Morgan, Joshua [mailto:[EMAIL PROTECTED]] Sent: Wednesday, March 13, 2002 3:09 PM To: NT 2000 Discussions Subject: RE: GPO's and Groups Woops Silly me My Computer: LTTesting01 is the only thing in the Group Software TEST the Policy is assigned to machines in that OU Joshua Morgan PH: (864) 250-1350 Ext 133 Fax: (413) 581-4936 [EMAIL PROTECTED] -----Original Message----- From: James Winzenz [mailto:[EMAIL PROTECTED]] Sent: Wednesday, March 13, 2002 3:04 PM To: NT 2000 Discussions Subject: RE: GPO's and Groups You are assigning the GPO to a user, not to a computer, based on the info that you have provided here. That means the application is not actually installed until the user logs in and tries to execute it for the first time. You need to assign the application to a computer, not a user. This will install the application when the computer boots up, before anyone logs in. James Winzenz, MCSE, A+ Associate Systems Administrator Peregrine Systems, Inc. -----Original Message----- From: Morgan, Joshua [mailto:[EMAIL PROTECTED]] Sent: Wednesday, March 13, 2002 2:41 PM To: NT 2000 Discussions Subject: GPO's and Groups I know that I am supposed be able to assign software to a machine when that machine is in a Sec Group and that Group can read the GPO. But it is not working for me My User: TEST is in the Users Container My Group: Software TEST is in the Users Container My OU: Testou1 has the default Permissions My GPO: GPO has the permissions for Authenticated users removed and I have added the group Software TEST to have read and apply Group Policy. Am I missing something? Joshua Joshua Morgan PROFITLAB Network Engineer [EMAIL PROTECTED] "One is glad to be of service " --Robin Williams (Bicentennial Man)-- ------ You are subscribed as [EMAIL PROTECTED] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to [EMAIL PROTECTED] ------ You are subscribed as [EMAIL PROTECTED] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to [EMAIL PROTECTED] ------ You are subscribed as [EMAIL PROTECTED] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to [EMAIL PROTECTED] ------ You are subscribed as [EMAIL PROTECTED] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to [EMAIL PROTECTED] ------ You are subscribed as [email protected] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to [EMAIL PROTECTED]
