Active Directory Group Policies

[gorn]

So I'm working on using Group Policies to install software. If I add a machine directly the the OU then it works how it should. However if I add a group to the OU that contains the computer, it never installs the software.

I'd give more information but I'm not sure I have any. It's a Win 2k3 server and a Win2k client.

[Stuart]

http://www.microsoft.com/technet/support/default.mspx

This may help.

[gorn]

[quote author=Stuart link=board=25;threadid=9542;start=0#msg86890 date=1090338453]
http://www.microsoft.com/technet/support/default.mspx

This may help.
[/quote]

Thanks, but I've been looking. And I even googled too :P.

[gorn]

http://support.microsoft.com/default...b;en-us;220822

notice how unhelpful their solutions are. I had already actually found some information on that (that explains it a bit better) but still as of yet, no luck.

[boblucci]

Did you ever thing about using SMS?

I hear it works great!! I never used it but a friend said it work real well......

[gorn]

Active Directory kinda works with SMS. But SMS is more like server pushing, active directory GPO is like client pulling. (Client logs into the domain and it gets new packages, SMS you push out to clients that are currently online)

[boblucci]

the only thing i could say is double check the permissions at the group level.

Because if add a computer directly to the OU the software gets installed, but if you add a group to the OU it dosent work.

Also check the permissons on the OU maybe it can only install the software in the first level of the OU and not into groups??

I wish i had access to that in my new job.....

[gorn]

I ended up getting it. You /must/ put the computers in the OU. but then you can set the permissions of the group policy to not apply to Authenticated Users (read members of the domain) and add the group you want and set it to apply to that.

Backwards setup if you ask me.