Announcement

Collapse
No announcement yet.

Policy unaware of higher group.

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Policy unaware of higher group.

    Hi,

    I want to apply a certain policy to a certain group in an OU. However the policy seems unaware of a higher group.

    Let me explain. The users are in a global group called "2". Global group 2 is member of domain local group "1".

    So it looks like: Group 1 (domain local) \ Group 2 (global) \ Users.

    The policy however does not apply when I tell it to only apply to the domain local group (Group 1) but works perfectly when I assign it to the global group (Group 2). Somehow the policy does not sense that the user is a member of both groups and only looks at the member of section and sees it is only a member of the global group.

    Is there a workaround for this or am I dong something completely wrong?

    Hope the story isn't too blurry.

  • #2
    Re: Policy unaware of higher group.

    In general, despite the name, "group policy" does not apply to windows groups
    You can apply to Site, Domain or OU (as well as local policies)
    You can apply security permissions by group so it does / does no apply

    Suggestion:
    Create a sub OU, move in the relevant users and apply the policy there
    Tom Jones
    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
    PhD, MSc, FIAP, MIITT
    IT Trainer / Consultant
    Ossian Ltd
    Scotland

    ** Remember to give credit where credit is due and leave reputation points where appropriate **

    Comment

    Working...
    X