Why doesn't GPO work if I create it in a container?

Question

Active Directory

Created a container, created a user in it. If I set the rights for the default policy or the policy created at the same level as the default policy, then everything is OK. If I create in a container with a user container, then it does not work. Why?

Answer 1

Check that the security policy has a "domain computers" group with read permissions.
And so the output of gpresult / r from the problem computer will not interfere