Remove From My Forums

GPO for any authenticated user

Question

0

Sign in to vote
Hello,

I created a OU, within which is a computer.

I created a GPO applied to that OU. This GPO has some settings in the "User" branch as well as in the "Computer" one.

The security filtering is set to "Authenticated users"

My question is:

Does it matter the user I am logged with to grab the User settings of the GPO? .

I asked it because the GPO wasn't working but as soon as I included a user within the OU and I logged with this user, the GPO worked.

To my knowledge, if you put a computer within a OU, and apply a GPO to it, it didn't matter the user you log on with, anyway the user branch of the GPO will aplly to ANY user that logs in.

Is this correct?

Luis Olías.
- Edited by Luis O.J Wednesday, May 17, 2017 7:01 AM
Thursday, March 09, 2017 7:15 PM

Reply

|

Quote

All replies

1

Sign in to vote
Hi Luis,
If you only configure computer configuration, then the GPO will only apply to computer accounts, you should link the GPO to computer accounts OU. The user account will ignore the GPO even if they are located in the same OU. And similarly, user configuration only affect the user accounts in the OU.
If a GPO is not working, first of all, please run gpresult /h command to check if the GPO is applied to clients successfully.
If the GPO is not applied, you could follow the article as below to troubleshoot:
10 Common Problems Causing Group Policy To Not Apply
http://social.technet.microsoft.com/wiki/contents/articles/22457.10-common-problems-causing-group-policy-to-not-apply.aspx
Best regards,
Wendy
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.
- Proposed as answer by Wendy JiangMicrosoft contingent staff, Moderator Friday, March 17, 2017 9:33 AM
Friday, March 10, 2017 6:36 AM

Reply

|

Quote

Moderator

1

Sign in to vote
NO,

If the OU has only computer accounts, only the computer configuration settings will be applied.

But if you want the User settings configured on the GPO to be applied to all the users whoever login to the computers, you can make use of "LOOPBACK PROCESSING".

More info:

https://social.technet.microsoft.com/wiki/contents/articles/2548.windows-server-understand-user-group-policy-loopback-processing-mode.aspx

https://4sysops.com/archives/group-policy-loopback-processing-part-1-usage-scenarios/

Regards,
Rafic

If you found this post helpful, please give it a "Helpful" vote.
If it answered your question, remember to mark it as an "Answer".
This posting is provided "AS IS" with no warranties and confers no rights! Always test ANY suggestion in a test environment before implementing!
- Edited by iamrafic Friday, March 10, 2017 6:44 AM TYPO
- Proposed as answer by Wendy JiangMicrosoft contingent staff, Moderator Friday, March 17, 2017 9:33 AM
Friday, March 10, 2017 6:43 AM

Reply

|

Quote

0

Sign in to vote
Hi Luis,

Just checking in to see if the information provided was helpful. And if the replies as above are helpful, we would appreciate you to mark them as answers, please let us know if you would like further assistance.

Best Regards,

Wendy

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.
- Edited by Wendy JiangMicrosoft contingent staff, Moderator Friday, March 17, 2017 9:34 AM
Friday, March 17, 2017 9:34 AM

Reply

|

Quote

Moderator