none
Question about policy application

    Question

  • If I have a GPO with both computer settings and user settings, but the OU it is linked to only contains computer objects, are the user settings irrelevant, or will they be applied to users that log on to those machines?

    # When I wrote this script only God and I knew what I was doing. # Now, only God Knows!

    Tuesday, April 7, 2015 2:43 PM

Answers

  • > If I have a GPO with both computer settings and user settings, but the
    > OU it is linked to only contains computer objects, are the user settings
    > irrelevant, or will they be applied to users that log on to those machines?
     
    They are irrelevant. Computer objects do not apply user settings, and
    users evaluate GPOs in the SOM of the user object.
     
    This changes when you enable Loopback processing :) Loopback extends the
    SOM of users with the SOM of computers and applies user policies linked
    to computer OUs.
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    • Proposed as answer by Devaraj G Tuesday, April 7, 2015 4:47 PM
    • Marked as answer by Wasisname Tuesday, April 7, 2015 6:03 PM
    Tuesday, April 7, 2015 3:34 PM

All replies

  • > If I have a GPO with both computer settings and user settings, but the
    > OU it is linked to only contains computer objects, are the user settings
    > irrelevant, or will they be applied to users that log on to those machines?
     
    They are irrelevant. Computer objects do not apply user settings, and
    users evaluate GPOs in the SOM of the user object.
     
    This changes when you enable Loopback processing :) Loopback extends the
    SOM of users with the SOM of computers and applies user policies linked
    to computer OUs.
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    • Proposed as answer by Devaraj G Tuesday, April 7, 2015 4:47 PM
    • Marked as answer by Wasisname Tuesday, April 7, 2015 6:03 PM
    Tuesday, April 7, 2015 3:34 PM
  • Thanks, I thought as much, but wanted some verification.

    # When I wrote this script only God and I knew what I was doing. # Now, only God Knows!

    Tuesday, April 7, 2015 6:03 PM