Active Directory Administration Cookbook

Linking the GPO to OUs with devices

As outlined in Linking a GPO to an OU recipe from Chapter 9, Getting the Most Out of Group Policy, follow these steps to link the GPO to OUs with devices in scope for LAPS:

1. Log into a system with the Group Policy Management Console feature installed with an account that is either a member of the Domain Admins group, or the current owner of the Group Policy Object, and have the Link GPOs permission on the OU(s), Site(s), and/or Domain(s) where the Group Policy Object is to be linked, or is delegated the Edit Settings, or Edit settings, delete and modify security permission on the GPO, and have the Link GPOs permission on the Organizational Unit(s) where the Group Policy Object is to be linked.
2. Open the ...