Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Applying group policy only to members of a domain local security group
Applying group policy only to members of a domain local security group [message #406387] Sat, 06 March 2010 14:56 Go to next message
Drazen  is currently offline Drazen  Croatia
Messages: 13
Registered: June 2009
Junior Member
So there is domain ABC.local with various OUs and sub-OUs defined.
There is also domain local security group (placed in ABC\Users)
defined whose members are users from various OUs/subOus. If I wanted
to apply group policy only to that securiy group, how would I do that?

I tried to link group policy object at the ABC.local domain level and
then apply security filtering by removing Authenticated users group
and adding domain local security group containing users from various
OUs.
However the policy did not apply to the users. When I linked group
policy object to OUs where users reside, it got applied. How is this
explained?

Regards,
Drazen
Re: Applying group policy only to members of a domain local security group [message #406408 is a reply to message #406387] Sat, 06 March 2010 15:46 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Drazen,

A GPO can only be applied to users or computers, NOT to security groups.
You can use security filtering only if the user accounts/computer accounts
are in the OU where you apply the security filtering.

See also:
http://technet.microsoft.com/en-us/library/cc781988(WS.10).aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> So there is domain ABC.local with various OUs and sub-OUs defined.
> There is also domain local security group (placed in ABC\Users)
> defined whose members are users from various OUs/subOus. If I wanted
> to apply group policy only to that securiy group, how would I do that?
>
> I tried to link group policy object at the ABC.local domain level and
> then apply security filtering by removing Authenticated users group
> and adding domain local security group containing users from various
> OUs.
> However the policy did not apply to the users. When I linked group
> policy object to OUs where users reside, it got applied. How is this
> explained?
> Regards,
> Drazen
Re: Applying group policy only to members of a domain local security group [message #406448 is a reply to message #406408] Sat, 06 March 2010 16:52 Go to previous messageGo to next message
Drazen  is currently offline Drazen  Croatia
Messages: 13
Registered: June 2009
Junior Member
Thanks Meinolf, that clears it.

Regards,
Drazen

On Mar 6, 11:46 pm, Meinolf Weber [MVP-DS] <meiweb@(nospam)gmx.de>
wrote:
> Hello Drazen,
>
> A GPO can only be applied to users or computers, NOT to security groups.
> You can use security filtering only if the user accounts/computer accounts
> are in the OU where you apply the security filtering.
>
> See also:http://technet.microsoft.com/en-us/library/cc781988(WS.10).aspx
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > So there is domain ABC.local with various OUs and sub-OUs defined.
> > There is also domain local security group (placed in ABC\Users)
> > defined whose members are users from various OUs/subOus. If I wanted
> > to apply group policy only to that securiy group, how would I do that?
>
> > I tried to link group policy object at the ABC.local domain level and
> > then apply security filtering by removing Authenticated users group
> > and adding domain local security group containing users from various
> > OUs.
> > However the policy did not apply to the users. When I linked group
> > policy object to OUs where users reside, it got applied. How is this
> > explained?
> > Regards,
> > Drazen
Re: Applying group policy only to members of a domain local security group [message #406652 is a reply to message #406448] Sun, 07 March 2010 04:58 Go to previous message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Drazen,

You're welcome.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Thanks Meinolf, that clears it.
>
> Regards,
> Drazen
> On Mar 6, 11:46 pm, Meinolf Weber [MVP-DS] <meiweb@(nospam)gmx.de>
> wrote:
>
>> Hello Drazen,
>>
>> A GPO can only be applied to users or computers, NOT to security
>> groups. You can use security filtering only if the user
>> accounts/computer accounts are in the OU where you apply the security
>> filtering.
>>
>> See
>> also:http://technet.microsoft.com/en-us/library/cc781988(WS.10).aspx
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>>> So there is domain ABC.local with various OUs and sub-OUs defined.
>>> There is also domain local security group (placed in ABC\Users)
>>> defined whose members are users from various OUs/subOus. If I wanted
>>> to apply group policy only to that securiy group, how would I do
>>> that?
>>>
>>> I tried to link group policy object at the ABC.local domain level
>>> and
>>> then apply security filtering by removing Authenticated users group
>>> and adding domain local security group containing users from various
>>> OUs.
>>> However the policy did not apply to the users. When I linked group
>>> policy object to OUs where users reside, it got applied. How is this
>>> explained?
>>> Regards,
>>> Drazen
Previous Topic:Software Install via GPO
Next Topic:Trust Failed
Goto Forum:
  


Current Time: Wed Jan 17 04:12:34 MST 2018

Total time taken to generate the page: 0.02127 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software