Share via

Group policy and its possible applications

Moshiur (Moshiur Khan) 20 Reputation points
2024-07-16T07:37:32.3333333+00:00

Hello Community,

A super basic scenario:

Two Organizational Units named after their branch consists of workstations that belong to said branch.
Specific workstations need group policies applied to them but the workstations can not be moved from their locations.

Another OU is created and a security group is added. That security groups members are the specific workstations from both groups.

The policy is applied to the third OU and enforced.

In theory, this should apply the policy to the workstations but in practice, its not. Can you lot give me a quick fix for this scenario or hint me on to why it isn't applying?

A few additional notes:

  • The apply group policy check box is set to enabled in advanced options
  • The policy applied is to block bluetooth support services and change a registry key to remove the bluetooth toggle.
  • Since the registry value is one time change, to revert it I have another policy set with the default registry values set up on a different group

Much appreciated,

-Leo

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,238 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Daisy Zhou 21,281 Reputation points Microsoft Vendor
    2024-07-16T09:06:53.0933333+00:00

    Hello Moshiur (Moshiur Khan),
    Thank you for posting in Q&A forum.

    1.The apply group policy check box is set to enabled in advanced options
    A: Make sure the Authenticated Users have Read permission. Please check this machine groups also have Read permission.

    2.The policy applied is to block bluetooth support services and change a registry key to remove the bluetooth toggle.
    A: Please make sure the settings are under Computer Configurations instead of User Configurations.

    User's image

    3.Do you have three OUs like this? If so, what OU did you link this GPO to?
    You should link this GPO to OU with machines you mentioned.
    User's image

    4.You can try to export group policy result based on the steps below.

    For checking Computer Configuration within gpresult, we can follow steps below.

    Logon this machine using administrator account.

    Open CMD (run as Administrator).

    Type gpresult /h C:\gpo.html and click Enter.

    Open gpo.html and check gpo setting under "Computer Details".

    I hope the information above is helpful.

    If you have any questions or concerns, please feel free to let us know.

    Best Regards,

    Daisy Zhou

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.