GPResults say the GPOs are not applied because they are “empty”

active-directorygroup-policywindows-server-2008-r2

I am trying to apply several policies to my domain (running on Windows 2008 R2).

Below is a sample of how I have structured my OUs.

Test OU

  • {Computer based policy}

  • {User Based Policy}

    OU Users

    OU Computers

Should the policies take affect even at the level I have applied them?

I have one policy that effects Users and the other effects Computers. When I run GPResults it shows several policies not taking effect because they appear "Empty". Do I need to apply the policy at the User/Computer level or should I be placing it at the Test OU level work accordingly?

Best Answer

It should be noted that computer and user accounts can only "see" their respective portion of a group policy object. In other words, when a user account logs on, if it processes a GPO that only contains computer settings, that GPO it will appear to be "empty" to the user account because it did not contain any settings that the user account could see.

Unless GPResult is showing or not showing a policy setting it should/shouldn't be, then you can ignore errors about the GPO being empty.

Related Topic