Hello, I have been designated "server setter upper"... there is no IT department here I am afriad. Please be patient with me. I have been trying to fathom this for the last 3 days.

 

In essence, the GPO applied to the OU which my group object is listed under is not being applied to any of the group members. It does however get applied to any individual users put into that OU.

 

Please look at my screenshot (also attached). It depicts the problem exactly.

 

...anyone got any ideas? thanks in advance, Michelle

Hi,

 

First of all under GROUP POLICY MANAGEMENT (from domain controller), create a "NEW RESULTANT POLICY" from GROUP POLICY RESULTS. You must select a computer (a remote computer) and a user. After a while you have a result which tells you which policy has been applied and which has not been applied (denied policy).

 

Here you can see if there are any other policy which are not applied correctly.

 

The next step is:

 

Open Group Policy management mmc, select the OU where the policy is applied, select the policy. On the right side, there are 4 tabs, select the last one (I think is DELEGATION), on the right corner (bottom), click ADVANCED. On the next windows, click ADVANCED again and add a new user (the user or group you want to allow), now check the box "APPLY GROUP POLICY" and everything related to "READ" (it should be already ok).