Microsoft KB Archive/220822

= Group Policy Objects Applied to Organizational Units Containing Only Groups Are Not Applied to Members of Those Groups =

Article ID: 220822

Article Last Modified on 2/22/2007

-

APPLIES TO


 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Datacenter Server

-



This article was previously published under Q220822



SUMMARY
Group Policy Objects (GPOs) are applied only to the users or computers that are members of the Organizational Unit (OU) to which the GPO is linked. Groups that are placed in the OU have no effect during the processing of a group policy.



MORE INFORMATION
There are alternative mechanisms that you can use to filter GPOs on the basis of security group membership:
 * Filter by using an access control entry (ACE) placed directly on the GPO named Apply Group Policy.
 * Group policy filtering can be accomplished only by using membership in Security groups. Distribution groups, such as Universal groups, cannot be used to filter the application of group policies.
 * Access control entries can be applied to the group policy from the Security tab of its Properties dialog box.

Keywords: kbenv kbinfo KB220822

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.