Active Directory OU help

[MattDLEA]

Hi,

 

I have started to deploy software and updates more using group policys. However I like to do it by computer basis rather than by user.

 

So at the moment I have to .... in the security filtering click add then click object types then add a tick in computers then add a computer name and repeat.

 

What i'd like to be able to do is say apply this group policy to all the computers in the ICT suite.

 

how would I go about this?

I think its OU but i never done this before so wanted to check how to do it first.

Is it also posible to have computers in more than one OU?

 

TIA

[DT2]

OU is indeed what you're looking for. A user/computer account can only be in one OU, but can be a member of many groups, as I'm sure you know.

 

DT

[MattDLEA]

So in Active directory.

Domainname.local > Computers I right click> new> group ( give it a name and then type as security? i want to use it to install msi's) So call it IT room for example. Then right click on the group and click members and add all the computers that are in the ITRoom?

 

Then do the same and call a group None teaching and make all the computers that are none teaching machines members of it even though this will include all the ITroom Group.

?

[pete]

What i'd like to be able to do is say apply this group policy to all the computers in the ICT suite.

 

Our Workstation OU Structure is similar to:

 

DomainName
-- Workstations
----- Room 01
----- Room 02
----- Room 03
----- etc
-- WorkstationsOffices
----- School Office
----- SLT
----- Dept Offices
----- etc

 

So we can apply policies at different OUs for different areas. In group policy management console, right-click the OU and select "Link an existing GPO" and/or "Create a GPO in this domain and link it here"

 

Is it also posible to have computers in more than one OU?

 

No, though you can use sub-OU. If we need to filter machines below the OU level we use security groups or (more rarely) WMI filters.

[DT2]

So in Active directory.

Domainname.local > Computers I right click> new> group ( give it a name and then type as security? i want to use it to install msi's) So call it IT room for example. Then right click on the group and click members and add all the computers that are in the ITRoom?

 

Then do the same and call a group None teaching and make all the computers that are none teaching machines members of it even though this will include all the ITroom Group.

?

 

Providing you wish to use your Computers OU, then yes.