Windows 10: Windows 2016 Domain - Group Policies not applying to OU

So we have a domain and have various group policies some apply to computer settings, some apply to user settingsIf we link a computer group policy directly to the root of the domain, policy works fine and everything is great.If we take the same policy, remove it from the domain root, move the computer account to a sub OU and then link the group policy to that OU, the policy no long works.There is no security filtering enabled, using "Authenticated Users" as scope.If we run the Group Policy Results wizard, it only shows policies that are being applied in the root domain. No group policies loc

:)

 

Windows Domain Group Policy

So I have been setting this domain up for a school for a couple of weeks now and I having problems with group policy. One I am having problems with with folder misdirect. Two I am having problems with updating windows settings. At this point if you can help me I am willing to reward you *Big Grin

Oh yeah the OS is Windows Server 2008 R2

 

Group policies not applying to devices

Hi, there is a known bug in Group Policy when it comes to the 'Authenticated Users' group. It normally has to have full rights for the policy to work. Are the servers all in the same OU?

 

Group policies not applying to devices

I have been setting up group policies for servers so we can control how and when servers are being updated. I am starting to have a problem as when I see the result of the policy its saying Filtering: Denied (Security).

The way I set them up is that I created two security groups on AD and added half of the servers on one group and the rest on the other. The reason I did this as I dont want to have all servers update and restart the same day/week. When I created the policy
I set all the settings and then I came to the part where I think I am having the issue. I created the policy at the toppest part of the AD Forest so all devices can see it. I remove the Authenticated Users permission from the scope security filtering as this
was adding the policy to the computers as well and not just the servers and added the group I created. On the delegation tab I added the Authenticated Users group back but gave it rights for read only and removed the apply policy. Then I set the group I created
to have read and apply policies.

This is not working so I tried to link the policies directly to the OU of the servers with the same permissions as before and still the same problem. Can please anyone let me know if it is possible to set policies without Authenticated Users group?