General discussion

Locked

Active Directory -

By WALCH_DO ·
First, I have to say that I can't believe there is not a specific "Active Directory" or "Windows 2000" server section here for questions. But, having said that here's my question:

I have applied a "Default Domain Group Policy" (AD Native Mode) at the domain level and have enabled a logon script at the user-config\windows settings\scripts
level within this GPO.

I have a half-dozen OUs in the domain. I am wondering why, after creating this GPO, that it does not show up in any of the underlying
OU "Group Policy Object Links". The Default Doman Policy appears to be working for all the underlying OUs, without seeing it listed in each OU's "Group Policy Object Links", but it seems like it should be included in the list for management purposes. I know that I can manually create a links to this policy from each of the OUs, but am wondering if this is necessary
since it seems to be working. If this were a large organization it would be lots of extra work to manually create this link it each OU.

Ideally it would be displayed by default, since it appears to working for each of the domains OUs.

Any insight would be appreciated.

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Active Directory -

by timwalsh In reply to Active Directory -

Basically, I think your issue comes down to this: Although OUs are created hierarchically within a domain, GPOs related to an OU are applied AFTER a domain GPO.

You shouldn't need to link the domain GPO to the OU. Since OUs are part of a domain, the domain GPO will automatically be applied to the underlying OUs also, UNLESS an OU GPO has a different setting than the domain GPO, in which case the OU GPO setting will apply.

Collapse -

Active Directory -

by WALCH_DO In reply to Active Directory -

The question was auto-closed by TechRepublic

Collapse -

Active Directory -

by shmaltz In reply to Active Directory -

First, there is a "Windows 2000" section on TechRepublic.

What you are seeing is by design. It has nothing to do with not setting it up correctly. When you apply a GPO at any level it may be overwritin by a lower level GPO. You would only see it in the GPO links if it is linked. A GPO that is linked means that it will apply the same policy than a different object to this object. This would typicly by used only if it is not already applied i. e. from OU to OU. but not from Domain to OU since it is anyhow applied. Every GPO that is on a higer level than this object is, will anyhow get applied to this object.

Collapse -

Active Directory -

by WALCH_DO In reply to Active Directory -

The question was auto-closed by TechRepublic

Collapse -

Active Directory -

by WALCH_DO In reply to Active Directory -

This question was auto closed due to inactivity

Back to Windows Forum
5 total posts (Page 1 of 1)  

Related Discussions

Related Forums