I may be getting a bit confused about who policy is applied to when it is attached to an OU.
For example, if I wanted to apply policy to a group of 7 computers regardless of who logged into those computers, would I drop the computer objects into the organizational unit that is linked to the policy?
Currently I have an OU that has a single user in it. Agents all use the same guest password on those 7 systems to login to the network so I dropped that particular guest user into the OU that contains the linked policy and it works.
Any time a user that is not in that group logs in to one of those machines, the policy applied to the next highest OU relative to that user’s location in Active Directory is applied to the login.
Here’s a challenge. I would like to apply wallpaper to ALL of the network computers, but disallow those 7 computers from having custom wallpaper unless an authorized user logs in, and for all of the other computers, the wallpaper would show up, but it could be changed if the user wanted it to be changed.
This is a simple example to attempt to grasp this concept.
If I move a computer to an OU, but a user that is in a differnt OU logs into that computer and each OU has a policy, which policy takes precedence?
If I drop a Security Group into an OU, does the policy linked to that OU apply to the users in that group if the users in that group are already in another OU with a different policy?
Thanks for your help guys…!
