+ Post New Thread
Results 1 to 8 of 8
Windows Thread, Can you have an OU in an OU? in Technical; Just started pushing software out using MSI's and have created an OU with the domain computers inside it so that ...
  1. #1
    TechSupp's Avatar
    Join Date
    Mar 2007
    Location
    South Yorkshire
    Posts
    1,876
    Thank Post
    295
    Thanked 120 Times in 101 Posts
    Rep Power
    40

    Can you have an OU in an OU?

    Just started pushing software out using MSI's and have created an OU with the domain computers inside it so that they are updated with the software. All so far so good and installs going ahead. Now I want to just install some new software on just a few of those PC's, so do I now have to create a new OW inside the existing OU with the computers in it so that both OU sets of software install on the new PC's and only the first set of software install on the rest? Not at work at the moment so doing this from memory :-)...or am I thinking of this all wrong? i.e. I presume I can't have computers in two OU's at once!

  2. #2

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,568 Times in 1,250 Posts
    Rep Power
    340
    Yes you can and what you're saying seems correct

  3. Thanks to Michael from:

    TechSupp (15th April 2008)

  4. #3


    Join Date
    Feb 2007
    Location
    Northamptonshire
    Posts
    4,688
    Thank Post
    352
    Thanked 794 Times in 714 Posts
    Rep Power
    346
    Yes, put the new OU into the existing OU and put the pc's into that and it will pick up software allocated to both the parent OU and the child.

  5. Thanks to kmount from:

    TechSupp (15th April 2008)

  6. #4
    TechSupp's Avatar
    Join Date
    Mar 2007
    Location
    South Yorkshire
    Posts
    1,876
    Thank Post
    295
    Thanked 120 Times in 101 Posts
    Rep Power
    40
    Wish I'd started using msi's ages ago , but now I have its just saved myself stacks of time. Thanks for the replys, I'll sort that next time I'm in. What triggers the software to install and some PC's just needed rebooting from the button on the PC yet some needed the power turning off then rebooting to get them to pick up the new software? They are working just curious as to why. Not a major problem as I just post a message on the notice board for all PC's to be turned off.

  7. #5

    Join Date
    Mar 2007
    Posts
    1,753
    Thank Post
    79
    Thanked 288 Times in 219 Posts
    Rep Power
    85
    group policy installs are like that, sometimes it takes 2 or more reboots to get the policy and apply it.

  8. #6


    Join Date
    Feb 2007
    Location
    Northamptonshire
    Posts
    4,688
    Thank Post
    352
    Thanked 794 Times in 714 Posts
    Rep Power
    346
    Its to do with how often they 'refresh' their policy.

    You can 'force' it if you log onto it, and click start, run, and type "gpupdate /force" and then reboot it.

    Should work in most cases

  9. #7

    Join Date
    Aug 2005
    Location
    London
    Posts
    3,154
    Thank Post
    114
    Thanked 527 Times in 450 Posts
    Blog Entries
    2
    Rep Power
    123
    gpupdate /force /boot saves having to hang around for it to finish; you can also run it remotely with psexec

    The other way of getting software to install on just some machines is to put the computers in a security group. Remove "authenticated users" from the bit in GPMC which says "the settings in this GPO only apply to the following groups, users and computers" and then add the group you've just created. This way you can attach the GPO at the top of the domain and it can apply to odd computers scattered across the OUs

  10. #8

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    Quote Originally Posted by kmount View Post
    Yes, put the new OU into the existing OU and put the pc's into that and it will pick up software allocated to both the parent OU and the child.
    Oh and BTW if you don't want this to happen for some reason, you can right click the OU in the GPMC and select 'Block Inheritence'. Although personally in situations where you might want to do this, I prefer to use Security filtering instead.

SHARE:
+ Post New Thread

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •