Ask the Expert

Where should a group policy be applied for non-administrative users?

I want to implement Group Policy in a Windows 2000 domain. I have not created any OU's. So, when I apply the policy to the domain, it applies for the administrator account also and it applies only to the Domain Controller. What I would like to know is where the Group Policy should be applied for the users other than the administrator and also how much time it takes to apply for all the computers in the domain?

    Requires Free Membership to View

First things first: Get some help with a proper OU design, and don't do anything with Group Policy without getting some training. Group Policy is all powerful and can crush your domain like a bug if not utilized properly. With that said, the best approach is to create some OUs, then move your computers and users into those OUs, then, finally, link the GPOs to those OUs. That way, you can segment out which users and computers get what GPOs. Lastly, Group Policy is applied every 90 minutes or to your users and computers.

Additional Expert Help:
Be sure to check our Answer FAQ for more expert advice.
For faster answers, visit ITKnowledge Exchange.

This was first published in January 2005

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.