+ Post New Thread
Results 1 to 8 of 8
Windows Thread, Can you have an OU in an OU? in Technical; Just started pushing software out using MSI's and have created an OU with the domain computers inside it so that ...
  1. #1
    TechSupp's Avatar
    Join Date
    Mar 2007
    Location
    South Yorkshire
    Posts
    1,882
    Thank Post
    297
    Thanked 120 Times in 101 Posts
    Rep Power
    41

    Can you have an OU in an OU?

    Just started pushing software out using MSI's and have created an OU with the domain computers inside it so that they are updated with the software. All so far so good and installs going ahead. Now I want to just install some new software on just a few of those PC's, so do I now have to create a new OW inside the existing OU with the computers in it so that both OU sets of software install on the new PC's and only the first set of software install on the rest? Not at work at the moment so doing this from memory :-)...or am I thinking of this all wrong? i.e. I presume I can't have computers in two OU's at once!

  2. #2

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,568 Times in 1,250 Posts
    Rep Power
    340
    Yes you can and what you're saying seems correct

  3. Thanks to Michael from:

    TechSupp (15th April 2008)

  4. #3


    Join Date
    Feb 2007
    Location
    Northamptonshire
    Posts
    4,690
    Thank Post
    352
    Thanked 796 Times in 715 Posts
    Rep Power
    347
    Yes, put the new OU into the existing OU and put the pc's into that and it will pick up software allocated to both the parent OU and the child.

  5. Thanks to kmount from:

    TechSupp (15th April 2008)

  6. #4
    TechSupp's Avatar
    Join Date
    Mar 2007
    Location
    South Yorkshire
    Posts
    1,882
    Thank Post
    297
    Thanked 120 Times in 101 Posts
    Rep Power
    41
    Wish I'd started using msi's ages ago , but now I have its just saved myself stacks of time. Thanks for the replys, I'll sort that next time I'm in. What triggers the software to install and some PC's just needed rebooting from the button on the PC yet some needed the power turning off then rebooting to get them to pick up the new software? They are working just curious as to why. Not a major problem as I just post a message on the notice board for all PC's to be turned off.

  7. #5

    Join Date
    Mar 2007
    Posts
    1,764
    Thank Post
    79
    Thanked 290 Times in 221 Posts
    Rep Power
    86
    group policy installs are like that, sometimes it takes 2 or more reboots to get the policy and apply it.

  8. #6


    Join Date
    Feb 2007
    Location
    Northamptonshire
    Posts
    4,690
    Thank Post
    352
    Thanked 796 Times in 715 Posts
    Rep Power
    347
    Its to do with how often they 'refresh' their policy.

    You can 'force' it if you log onto it, and click start, run, and type "gpupdate /force" and then reboot it.

    Should work in most cases

  9. #7

    Join Date
    Aug 2005
    Location
    London
    Posts
    3,156
    Thank Post
    115
    Thanked 528 Times in 451 Posts
    Blog Entries
    2
    Rep Power
    124
    gpupdate /force /boot saves having to hang around for it to finish; you can also run it remotely with psexec

    The other way of getting software to install on just some machines is to put the computers in a security group. Remove "authenticated users" from the bit in GPMC which says "the settings in this GPO only apply to the following groups, users and computers" and then add the group you've just created. This way you can attach the GPO at the top of the domain and it can apply to odd computers scattered across the OUs

  10. #8

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    Quote Originally Posted by kmount View Post
    Yes, put the new OU into the existing OU and put the pc's into that and it will pick up software allocated to both the parent OU and the child.
    Oh and BTW if you don't want this to happen for some reason, you can right click the OU in the GPMC and select 'Block Inheritence'. Although personally in situations where you might want to do this, I prefer to use Security filtering instead.

SHARE:
+ Post New Thread

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •