Fixing Group Policy scoping issues
Updated: March 2, 2005
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2
This section explains scoping rules and points to troubleshooting tips.
Scoping the GPO
Determining which users and computers will receive the settings in a GPO is referred to as "scoping the GPO." Scoping a GPO is based on three factors:
The site, domain, or organization unit where the GPO is linked
The security filtering on the GPO
The WMI filter on the GPO
You can use the site, domain, and OU links from a GPO as the primary targeting principle for defining which computers and users should receive a GPO. You can then use security filtering and WMI filtering to further reduce the set of computers and users to which the GPO will apply.
If incorrectly configured, security filtering or WMI filtering can lead to unexpected results. This section provides ways to troubleshoot these areas.
From the following list, choose the problem that best describes your situation, and then step through the suggested fix: