Fixing Group Policy scoping issues

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

This section explains scoping rules and points to troubleshooting tips.

Scoping the GPO

Determining which users and computers will receive the settings in a GPO is referred to as "scoping the GPO." Scoping a GPO is based on three factors:

  • The site, domain, or organization unit where the GPO is linked

  • The security filtering on the GPO

  • The WMI filter on the GPO

You can use the site, domain, and OU links from a GPO as the primary targeting principle for defining which computers and users should receive a GPO. You can then use security filtering and WMI filtering to further reduce the set of computers and users to which the GPO will apply.

If incorrectly configured, security filtering or WMI filtering can lead to unexpected results. This section provides ways to troubleshoot these areas.

From the following list, choose the problem that best describes your situation, and then step through the suggested fix: