1

I created an OU, added Win 10 computers, blocked inheritance, and linked two GPO’s to it. The GPO’s are completely ignored. gpresult shows nothing. If I remove the block inheritance, the computers process the two GPO’s linked to the OU, and all the GPO’s above. I am baffled. I have some other OU’s at the same level that are blocking inheritance, but they are working as expected and only processing the GPO’s linked to them. I have deleted and re-created the OU’s but the result is the same.

8 Spice ups
2

Did you run a gpupdate /force on the machines and reboot, to ensure that the GPOs applied?

3

You are applying USER policies to USER objects and COMPUTER policies to COMPUTER objects in AD, right?

1 Spice up
4

Yes, I ran gpupdate /force multiple times, and with different PC’s.

5

dimforest, the policies were applied when I unblocked inheritance, and they are also used in other OU’s for the same objects, with success, so this does not appear to be the issue. I work for a large University and I only have direct access to computers objects, not users.

6

Okay, you led me to the answer, because these are user settings in a computer OU, as we do not have access to the user OU’s, so loopback policy is used. . I believe loopback processing was enabled in a GPO higher up so when I blocked inheritance it was blocked and user settings were not applying.