1

Hi!

Have a question about gpo mapping. My “map” gpo works well if it is on “domain-level” but not if if I target it on user.ou… Cant really get it? Used to do so?

Any Ideas?

5 Spice ups
2

Maybe check if the GPO is being inherited correctly at the OU level. Sometimes, GPOs at higher levels (like the domain level) may have settings that override or conflict with those at the OU level. Also remember LSDOU - Local, Site, Domain, then OU so settings applied at the domain level might be overriding those set at the OU level.

Also if the mapping is set up under User Configuration, ensure that the users who need the mapping are in the targeted OU. Conversely, if it’s under Computer Configuration, the computers should be in the OU.

3

What is the ‘map’ - do you mean drive mapping?
By ‘target’ do you mean link it to an OU?

In Group Policy manager if you select the User OU, does the GPO containing this ‘map’ show as linked there.
Then use group policy modelling to test if it will apply to a user - use an example computer and user (in the correct OU).
Then test for real if the above works.

If it is linked correctly but fails - have any of the security settings on the GPO been modified? do authenticated users or all computers have read?

4

Yes I mean user drive mapping and link to user OU. And yes the link is there, and everything looks good… I point it to a user group under User OU. I I always point to the groups before? Never have had this fault? Im at a new company, so somthing is different here… Autenticated user has read btw but not (read from security filtering). I dont get it :wink:

5

Any security filtering?
What does “GPResult /r” say on the client computer?

6

what is the result of the gpo modelling ?

What do you mean by this " Authenticated user has read btw but not (read from security filtering)"
Does the security filtering include the required users - i.e. default, or ‘all users etc’
2 things are required for GPO to process: the computer must be able to read the object (authenticated users is the default read on the object) and also the security filtering must allow the user.