Lukas Beeler's IT Blog

Windows group policies can be assigned to Active Directory sites. But you already knew that.

I’ve seen many setups where machines were put into OU’s according to their location, for configuring a local WSUS server, or an install source. Why? I have no idea, but maybe this feature just isn’t prominent enough to get recognized.

You will need a proper active directory site structure already in place (Which is easy to do. Just assign IP ranges to a site). This won’t work if you use the same subnet across your sites (long story, but it’s possible with virtual ethernet bridges – customer did this for licensing reasons).

Go to the . If you don’t have it, install it right now. I couldn’t imagine administrating Active Directory without it.

You will see a “Sites” option on the left side – but it is empty, and there are no sites inside. Just right-click and click “Display sites”.

And that’s it. You can then assigned policies to a site. And this even works with roaming laptop users, which change sites often.