How to Link a GPO to an OU
Group Policy Objects (GPOs) are essential for managing user and computer settings in an Active Directory (AD) environment. Linking a GPO to an Organizational Unit (OU) ensures that the policies apply only to the users or computers within that OU. Here's a detailed guide to linking a GPO to an OU.
Steps to Link a GPO to an OU
1. Open the Group Policy Management Console (GPMC)
- Press Win + R, type
gpmc.msc
, and hit Enter. - This opens the Group Policy Management Console, where you can manage GPOs and their links.
2. Locate the Target OU
- In the left pane, expand your domain.
- Navigate to the OU where you want to link the GPO.
3. Link the GPO to the OU
- Right-click the OU and select Link an Existing GPO.
- From the list of available GPOs, choose the one you want to link.
- Click OK to confirm.
4. Verify the GPO Link
- Select the OU in the GPMC.
- Check the Linked Group Policy Objects tab in the right pane to confirm the GPO is applied.
5. Force Group Policy Update
To ensure the policy takes effect immediately:
On a target computer, open Command Prompt as an administrator.
Run the command:This updates the policies on the local machine.
gpupdate /force
Related Article
Frequently asked questions:
-
Can I link multiple GPOs to the same OU?
Yes, you can link multiple GPOs to an OU. They are processed in the order listed in the Linked Group Policy Objects tab.
-
What is the processing order of GPOs?
GPOs are processed in this order: Local, Site, Domain, and OU. Within an OU, GPOs are applied in the order specified in the GPMC.
-
How do I prevent a GPO from being inherited by child OUs?
Enable the Block Inheritance option on the child OU or use the Enforce option on the parent GPO to override the block.
-
Can I unlink a GPO from an OU?
Yes, right-click the linked GPO under the OU in the GPMC and select Delete. This removes the link but does not delete the GPO itself.
-
How can I test if a GPO is applied correctly?
Use the Resultant Set of Policy (RSoP) tool or run gpresult /r in Command Prompt on a target computer to view applied policies.