Links vs Security Filtering in GPO

seanbruce2 · 2018-03-21T18:53:02.000Z

Hi All,

So my question is regarding GPOs and the GPMC. When setting up a GPO and applying it to specific computers can I just use the Links section to apply to an OU, lets call it Test as this will apply to 3 test computers, and leave the Security Filtering section empty or do i need to have a object in the filtering section.

Basically meaning if i set the Security Filtering object to all Domain Computers and the Link the GPO to the Test OU, will that only apply the GPO to all Domain Computers in the linked “Test” OU.

gregory-for-microsoft · 2018-03-22T11:59:38.000Z

If you ever remove Authenticated Users Security group scope then you have to add the Domain Computers Security Group to allow the computer to access the GPO. This is a change to the way GPO security was handled about 2 years ago and it still is not widely known yet.

So yes to your question about needing to add that to the security scope so that the GPO linked to that OU will work right.

Report back if that was not what you were asking so we can try and hash this out…

seanbruce2 · 2018-03-22T12:09:53.000Z

That worked perfectly, thank you!