An Organizational Unit targeting item allows a preference item to be applied to computers or users only if the user or computer is a member of the organizational unit (OU) specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the user or computer is a not member of the OU specified in the targeting item.

Organizational unit

The OU for which to detect membership. Matching is not case sensitive. You can specify an OU that is unqualified (MySubUnit), partially qualified (OU=MyOrgUnit,OU=MySubUnit), or fully qualified (OU=MyOrgUnit,OU=MySubUnit,DC=MyDC,DC=MyCompany,DC=com).

Note

The Organizational unit box accepts preference processing variables. Press F3 to display a list of variables from which you can select.

Direct member only

If this check box is selected, the targeting item returns true only if the user or computer is a direct member of the specified OU. If the user or computer inherited membership, the targeting item returns false.

User in OU

If this option is clicked, the targeting item compares the specified OU to the OU of which the user is a member.

Note

This option is available only for preference items under User Configuration.

Computer in OU

If this option is clicked, the targeting item compares the specified OU to the OU of which the computer is a member.

Note

You must choose either User in OU or Computer in OU.

Additional considerations

  • If a user or computer is not a member of an OU, but is a member of a security group that is a member of the OU, the user or computer is not a member of the OU.

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Preference items are available only in domain-based GPOs.

Additional references