How to Link a GPO to an OU
This article explains how to link an existing or newly created Group Policy Object (GPO) to a specific Organizational Unit (OU) using the Group Policy Management Console, enabling targeted policy application and centralized management within Active Directory environments.
Group Policy Objects (GPOs) play a crucial role in managing user and computer settings within an Active Directory (AD) environment. By linking a GPO to an Organizational Unit (OU), you ensure that the policies apply specifically to the users or computers in that OU.
Here’s a straightforward guide on how to link a GPO to an OU.
Steps to Link a GPO to an OU
1. Open the Group Policy Management Console (GPMC)
- Press Win + R, type gpmc.msc and hit Enter.
- This will bring up the Group Policy Management Console, where you can manage your GPOs and their links.
2. Locate the Target OU
- In the left pane, expand your domain and navigate to the OU where you want to link the GPO.
3. Link the GPO to the OU
- Right-click on the OU and choose "Link an Existing GPO".
- From the list of available GPOs, pick the one you want to link and click OK to confirm.
4. Verify the GPO Link
- Select the OU in the GPMC and check the Linked Group Policy Objects tab in the right pane to ensure the GPO is applied.
5. Force Group Policy Update
To make sure the policy takes effect right away, open Command Prompt as an administrator on a target computer and run the command:
gpupdate /force
This will refresh the policies on the local machine.
Final Thoughts
Linking a GPO to an OU is a key part of managing Group Policy in an Active Directory setup. By following these straightforward steps, you can make sure that the right policies are applied to the appropriate users or computers. Regularly reviewing and managing GPO links is essential for keeping your IT infrastructure secure, organized and running smoothly.
Related Article
Frequently asked questions:
-
Can I link multiple GPOs to the same OU?
Yes, you can link multiple GPOs to an OU. They are processed in the order listed in the Linked Group Policy Objects tab.
-
What is the processing order of GPOs?
GPOs are processed in this order: Local, Site, Domain, and OU. Within an OU, GPOs are applied in the order specified in the GPMC.
-
How do I prevent a GPO from being inherited by child OUs?
Enable the Block Inheritance option on the child OU or use the Enforce option on the parent GPO to override the block.
-
Can I unlink a GPO from an OU?
Yes, right-click the linked GPO under the OU in the GPMC and select Delete. This removes the link but does not delete the GPO itself.
-
How can I test if a GPO is applied correctly?
Use the Resultant Set of Policy (RSoP) tool or run gpresult /r in Command Prompt on a target computer to view applied policies.