I am having a problem with a policy being applied to a computer that should not normally get it. Here is the scenario:
I have three separate ou’s. One user ou with only user accounts, one computer ou with computer accounts and one citrix ou with a citrix computer account. These ou’s are all at the same level in AD. None of them are child/parent ou’s to each other.
There is a computer policy applied to the computer ou; a user policy applied to the users ou; and a special computer/user policy applied to the citrix ou. When a user logs into the citrix computer it gets the user policy from its user ou and it is merged with the user settings from the citrix ou policy. This all works fine and everything is great.
But somehow I have a user that is logging into a computer in the computer ou but is getting the policy from the citrix ou which it is not a member of. The user should be getting the computer policy from the computer ou and the user policy from the user ou, but not the computer or user settings from the citrix ou. I realize this is very confusing, but I am hoping someone can understand my problem and give me a suggestion. Thanks for your help!
