Applying Group Policy By Subnet

active-directorygroup-policywindows 10windows-server-2008-r2windows-server-2012-r2

Is there a way to apply a group policy by subnet?

I have three sites/offices – Washington, Texas, and California. When we (IT) puts a new desktop on the network and add it to the domain, the computer object gets dumped in the generic/default OU of "COMPUTERS" where I have to manually move the new system into their respective container by location.

Is there a way to have, at time of adding a system to the domain, to have Group Policy be applied to move the computer object into their local site OU?

I'm thinking that by subnet might be easiest, but I'm not deadset on it. Any advice would be appreciated.

Best Answer

The short answer to your question is yes. Group policy can be linked to an AD site. If the subnets and sites are correctly configured in ADSS, the policies will apply to the site. You can then apply further policies against OUs. To your other question around moving the computer to the right OU, this can easily be done through a script and deploy it to the sites.

Related Topic