1

I know this is probably a dumb question but here it goes. If a GPO is applied that only has user settings to an OU that only has devices will the GPO apply to anyone who logs into the device or not apply at all?

4 Spice ups
2

Not apply at all unless you enable loopback

3 Spice ups
3

It applies as needed. If a user logs in who is in the GPO’s scope it will be applied to that user on that machine.

1 Spice up
4

I disagree or you are just making a general statement about GPO scope.

A GPO consisting of only User Settings and applied to only an OU consisting of only computers will not do anything. (unless loopback processing is enabled)

2 Spice ups
5

The GPO is applied. The engine will evaluate the (empty) GPO computer configuration whenever the computer restarts or during its refresh cycle (wasting a few spare CPU cycles). Unless you disable the computer configuration on this GPO.

The user settings in the GPO will not have any effect unless a User is moved into that OU (or a child OU), or until loopback policy processing is enabled on a computer account in the OU (or a child OU).

2 Spice ups
6

The Computer AND Users have to be in the OU where the GPO is being applied. Otherwise, the GPO will only act upon the objects in that OU. So if the Computer component is turned off and only applying to the user AND Loopback processing is not enabled AND there are no Users in the OU THEN nothing will happen.