GPO Link on specific OU

Mohamed SAKHO 126 Reputation points
2023-10-18T10:05:19.2866667+00:00

Hello,

I created a GPO and I I would that the admin group which have permissions on it can link it on specific OU and prevent to link on the others.

Do you have any method please?

By advance Thank you.

Mohamed SAKHO

Windows for business | Windows Server | User experience | Other
Windows for business | Windows Client for IT Pros | User experience | Other
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Wesley Li-MSFT 4,576 Reputation points Microsoft External Staff
    2023-11-02T07:17:53.7566667+00:00

    Hello

    To link a Group Policy Object (GPO) to a specific Organizational Unit (OU) and prevent it from being linked to others, you can follow these steps:

    Create the GPO: If you haven’t already, create the GPO that you want to link.

    Link the GPO to the Specific OU: Navigate to the desired OU in the Group Policy Management Console. Right-click on this OU and select “Link an Existing GPO”. In the “Select GPO” dialog under Group Policy Objects, select the GPO you want to link and click OK.

    Set Permissions: To prevent others from linking this GPO to other OUs, you need to set permissions on the GPO. In the Group Policy Management Console, navigate to the GPO, right-click on it and select “Delegate”. In the Delegation tab, click on “Add” to add the admin group. In the permissions box, select “Deny” for the “Link GPO” permission. This will prevent members of this group from linking the GPO to other OUs.

    Please note that only users with appropriate permissions can create and manage GPOs. Also, changes made to GPOs can affect all users and computers in the domain, so it’s important to plan and test changes carefully.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.