hsbrown2

Hello, List, New here, but the list seems very active, hope someone can help! Currently, my default domain policy is currently neither linked nor enforced. Following Microsoft's recommendation, in order to use GPO for a simple login script, I applied and linked a gpo to domain.com/OU/Users, rather than to the whole domain via the default domain policy. Now I want to apply securtity center/firewall, etc... settings through gpo. I have been having issues with ID10T errors because people are not patching their machines, getting viruses, trojans, etc... Trouble is, the users container (of course) does not contain any Domain Computers. Domain Computers is not an available object in the GPOMC that I can apply a GPO to. Domain Computers is not a part of the OU that users are a part of. Domain Computers are all a part of the domain root (domain.com), and, as mentioned above, does not show up as an available group that I could apply a policy to. The computers are also not a member of the OU that users are. This is a small domain, I don't even see the precise need for an OU, but I didn't create it. My dilemma: I do not want a GPO that I create for Security Center, etc... to apply to the whole domain, i.e. all objects in AD, I just want to apply it to Domain Computers, but Domain Computers is not available as an object that one could apply a GPO to. How can I create a GPO that will apply the settings I have configured for Computer, without impcating the entire domain? TIA, H. Scott