How do I apply a gpo to a certain group:

Ex: I need to apply rules in one sector and in another sector. I have the group it and the administrative one, I want to create gpo that applies in the group and not in all group.

How do I do?

2 Spice ups

You apply the GPO to the OU of your needs, but only make use of the security Filter to only apply it to the security Group of your choice.

3 Spice ups

what policy is that user configuration or computer ?

You may try this

1 Spice up

Neally has it.

Always remember - “Group Policy Objects do not apply to Groups” - isn’t it obvious?

:wink:

1 Spice up

JitenSh I have already done this test, but only applies to individual users or machines as in the title.

The procedure referenced by JitenSh will and does work for groups. If it didn’t work for you during testing, then you did something wrong, or failed to account for something.

Most likely reasons for Security Filtering not working when using a group in the filter:

  • You used a new group on the filter

      • The computer was not restarted to get its new membership before running gpupdate
      • The user had not logged off and back on to attain its new group membership before running gpupdate.
      • Replication hadn’t completed to the computer or user’s logon server if the computer was restarted or if the user logged off.
      • The computer isn’t a member of the group and does not have read access to the GPO via other means (like Authenticated Users/Domain Computers Read)
  • DFS / FRS hadn’t finished replicating the GPO changes to the User/Computer’s logon server at the time of startup/logon.

  • Any number of other reasons depending upon what GPO setting you are attempting to apply.

Semicolon I can make the policies by creating a new organizational unit and throwing users in this organization.

But if I create a policy and no organizational unit and by the specific group it applies to everyone authenticated in the network.

You probably didn’t remove Authenticated Users permission to apply policy as described in link by JitenSh.

In this example it has a drive called people and a policy within the drive, the question is whether it moves users to the organizational unit or leaves it in the default users folder.

My policies are all at the root of my domain, when I apply the config settings in the example of our friend JitenSh and add the respective user group in the delegation anyway it does not work, what am I doing wrong?

Can you help me.

Here is the image:

Can you post the settings of the gpo? If you have linked it to the domain, no need of any OUs for the gpoto work. Also, post the gpresult.