Gpo Object Only Works, If It Is Direkt In The Domain-Root

[wiseguy]

Hallo,

 

I created an object in GPOs of a Windows 2008 R2 server, named "Testsomething". I set in this object a registry String in HKLM\Software\MyTest (only for testing)

 

Now i add this object to my OU where my testuser is in. When I run gpupdate /force now with this user, the registry string is not changed/set how ever. So looked in the output from gpresult and there I can see, that my object is not used:

"Abgelehnte (rejected) Gruppenrichtlinienobjekte":

Name: Testsomething

Verknpfungsstandort (location): mydomain.de/SpecialUsers

Grund (reason) abgelehnt (rejected): Leer (empty)

 

But when i put the Object directly in Domain Root (mydomain.de) than it works fine.

 

But why is that so?

[ICTCity]

In GP management check the security of that policy, it must be granted to be applied in some cases. Also run a resultant group policy and post results.