Are Group Policy settings not taking effect?
Group Policy is not being applied to users and computers in a security group that contains those users and computers, even though a Group Policy object is linked to an organizational unit that contains that security group. Cause- This is correct behavior. Group Policy affects only the users and computers that are contained in sites, domains, and organizational units. Group Policy objects are not applied to security groups. Solution- Link Group Policy objects to sites, domains, and organizational units only. Remember that the location of a security group in Active Directory is unrelated to whether Group Policy applies to the users and computers in that security group. For more information, see To Filter The Scope Of Group Policy Group Policy is not affecting users and computers in a site, domain, or organizational unit. Cause- Group Policy settings can be prevented, intentionally or inadvertently, from affecting users and computers in several ways. A Group Policy object can be disabled