I have a GPO that needs to be applied to a set of computer accounts. I have created the security group and added the computer accounts. What would need to be done to allow this to happen?

filter the GPO on the group. remove authenticated users

You can do this by creating a separate OU and put the computers in this OU and link the GPO to this OU. Another option is to use security filtering, remove authenticated users and add the security group you created.Regards Ronny

I have done that. With the group. And the computer account in the group.

and it doesn't work? Did you force the policy to update with gpupdate /force in a cmd prompt on both server and on the affecting computer or did you restart the computers? what operating system are running on both server and computers? Did you set computer or user configuration settings in the policy?Regards Ronny

please be specific. is it not working? did you gpupdate /force? what do you get with rsop.msc? where is the gpo linked with respect to the computer objects? is it linked higher in the ou structure? did you filter on the group and remove authenticated users as I suggested?

Hello StanLan, Please refer to the following article: How to Implement Group Policy Security Filtering http://www.windowsnetworking.com/articles_tutorials/Group-Policy-Security-Filtering.html Meanwhile, please make sure the group policies are configured under computer configuration section of GPO, and GPO is linked to OU that computer objects are located. Brent Hu,Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.