Home / server / Questions / 389219
In Process
Scott Szretter
Asked: 2012-05-16 04:14:52 +0800 CST

Can active directory GPO's apply to a group object?

  • 772

I know I can set up an OU, move user objects in to it, and link a GPO to that OU and that GPO will apply to those users.

Is it possible to set up an OU, move a group in to the OU, and have a linked GPO apply to all the users that are a member of that group, but the users are in a different OU?

If it matters, this is Windows Server 2003.

windows-server-2003 group-policy active-directory groups

1 Answers

  1. No it isn't, but you can link the GPO to the OU where the user accounts are and filter the GPO for those users in the group, meaning the GPO will only apply to the users in the OU that are members of the group. This is a fairly common practice.

    • 6