+ Post New Thread
Results 1 to 5 of 5
How do you do....it? Thread, Active Directory OU help in Technical; Hi, I have started to deploy software and updates more using group policys. However I like to do it by ...
  1. #1

    Join Date
    Jul 2010
    Posts
    685
    Thank Post
    74
    Thanked 29 Times in 23 Posts
    Rep Power
    15

    Active Directory OU help

    Hi,

    I have started to deploy software and updates more using group policys. However I like to do it by computer basis rather than by user.

    So at the moment I have to .... in the security filtering click add then click object types then add a tick in computers then add a computer name and repeat.

    What i'd like to be able to do is say apply this group policy to all the computers in the ICT suite.

    how would I go about this?
    I think its OU but i never done this before so wanted to check how to do it first.
    Is it also posible to have computers in more than one OU?

    TIA

  2. #2
    DT2
    DT2 is offline
    DT2's Avatar
    Join Date
    May 2011
    Location
    Lakeville, Carleton County, New Brunswick
    Posts
    695
    Thank Post
    140
    Thanked 197 Times in 138 Posts
    Rep Power
    75
    OU is indeed what you're looking for. A user/computer account can only be in one OU, but can be a member of many groups, as I'm sure you know.

    DT

  3. #3

    Join Date
    Jul 2010
    Posts
    685
    Thank Post
    74
    Thanked 29 Times in 23 Posts
    Rep Power
    15
    So in Active directory.
    Domainname.local > Computers I right click> new> group ( give it a name and then type as security? i want to use it to install msi's) So call it IT room for example. Then right click on the group and click members and add all the computers that are in the ITRoom?

    Then do the same and call a group None teaching and make all the computers that are none teaching machines members of it even though this will include all the ITroom Group.
    ?

  4. #4


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,715
    Thank Post
    288
    Thanked 789 Times in 616 Posts
    Rep Power
    226
    Quote Originally Posted by MattDLEA View Post
    What i'd like to be able to do is say apply this group policy to all the computers in the ICT suite.
    Our Workstation OU Structure is similar to:

    Code:
    DomainName
    -- Workstations
    ----- Room 01
    ----- Room 02
    ----- Room 03
    ----- etc
    -- WorkstationsOffices
    ----- School Office
    ----- SLT
    ----- Dept Offices
    ----- etc
    So we can apply policies at different OUs for different areas. In group policy management console, right-click the OU and select "Link an existing GPO" and/or "Create a GPO in this domain and link it here"

    Is it also posible to have computers in more than one OU?
    No, though you can use sub-OU. If we need to filter machines below the OU level we use security groups or (more rarely) WMI filters.

  5. Thanks to pete from:

    MattDLEA (11th January 2012)

  6. #5
    DT2
    DT2 is offline
    DT2's Avatar
    Join Date
    May 2011
    Location
    Lakeville, Carleton County, New Brunswick
    Posts
    695
    Thank Post
    140
    Thanked 197 Times in 138 Posts
    Rep Power
    75
    Quote Originally Posted by MattDLEA View Post
    So in Active directory.
    Domainname.local > Computers I right click> new> group ( give it a name and then type as security? i want to use it to install msi's) So call it IT room for example. Then right click on the group and click members and add all the computers that are in the ITRoom?

    Then do the same and call a group None teaching and make all the computers that are none teaching machines members of it even though this will include all the ITroom Group.
    ?
    Providing you wish to use your Computers OU, then yes.

  7. Thanks to DT2 from:

    MattDLEA (11th January 2012)



SHARE:
+ Post New Thread

Similar Threads

  1. Google Apps and Active Directory integration - help before it drives me mad!
    By cheredenine in forum Virtual Learning Platforms
    Replies: 19
    Last Post: 4th May 2012, 02:49 PM
  2. [SCCM 2007] SCCM - Linking collections to Active Directory OU's
    By mjgreen in forum O/S Deployment
    Replies: 11
    Last Post: 28th November 2011, 09:48 AM
  3. Replies: 20
    Last Post: 25th May 2008, 04:12 AM
  4. Forcing scheduled shutdown on Active Directory OU's
    By flexyjerkov in forum Windows
    Replies: 1
    Last Post: 8th August 2007, 02:05 PM
  5. Replies: 19
    Last Post: 10th August 2006, 10:12 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •