I am struggling with GPO's. I think I'm having trouble grasping why and how they work. Can someone smarter than me please explain?
I have a thin client, all by itself in an OU, that needs to have several GPO's 'do their thing' with it, and they bloody well aren't. These GPO's should be installing RemoteApp programs and setting some icons on the desktop. Security Filtering is set with the default, of Authenticated Users. In a different usage and OU, these setting run fine, however the user account is also in the OU.
That is not the case here, this clients username is elsewhere in AD, and I have no intention of moving it and fouling up god knows what.
So, in my mind, when I see 'Authenticated Users', it would make sense if the user is in AD, and authenticates, the GPO's should run. End-of-story. But that isn't happening, and I don't know why. Do I really need to have the user account in the same folder? I don't want these settings to apply to other computers, just this one, so I don't want to move the user account, or re-link the GPO elsewhere.