Policies no longer being applied ? What have I done?

[Sonic007]

So I created a GPO with various user and computer policies and some of it was to remove various parts of windows start menu Edge app, etc.

Only thing I’ve done since is move my computers from the computers location in AD to a new location named School-Computers.

Now I’m guessing my computer policies are now not being applied for some reason.

The policy is set for all authenticated users and domain users.

 

Anyone know where I’m going wrong?

 

Thankyou.

Edited February 21, 2020 by Sonic007

[round2it]

Have you applied the policies to the new ou

[Sonic007]

I think I tried that.

 

So the computers were just in the default computers section in AD and got the policies.

See photo.

I then created HA_Computers and moved them all in there.

That’s when the policies stopped being applied.

[mavhc]

Which is the GPO you created?

[Sonic007]

Staff_policies.

 

When computers were just in computers section they got this policy.

 

Do I need to go to the new HA_computers and link the policy to there too?

[3s-gtech]

It should just inherit, unless you have block inheritance set for this OU. Check that.

[Guest Guest]

Was the GPO previously linked at Domain Level?

 

You'll need to link it to the HA_Computers OU as it contains both user and computers settings

[mavhc]

Staff_policies.

 

When computers were just in computers section they got this policy.

 

Do I need to go to the new HA_computers and link the policy to there too?

 

If you want the computer part of the gpo to apply to all the computers in HA_computers, yes.

 

If you want it only to apply to computers staff log in to, no, but you have to enable loopback policies

[Davit2005]

I found before if I wanted policies to be applied to users that logged onto specific computers I had to add the Domain Computers Group with Loopback Policy set to Merge