When assigning a GPO to a OU target, does WEM apply the setting to sub containers as well or just the top level defined? Also when using search, what is the correct format? I tried to look up the canonical name but returns nothing. With only returning the top 50 results its hard to locate what i need in our domain. we have way more than 50 ou's outside of our citrix environment with a standard structure Our structure is like NAME PROD QA TEST

We support the sub OUs in the OU target. But the sub group is not supported in the OU targets.

what is the search string then? Is it just the name of the OU? IN my example, I have say 200 containers named 'prod'. If I search for that keyword then I will not get the result that I am looking for. If I type Name/Prod, nothing is returned. If I use the dn path, nothing is returned. If I apply the gpo to the top level, will the sub ou's inherit that policy?

the sub ou's inherit that policy if you apply to top level.

Thanks Sharp, adding some screen captures because I am obviously doing something wrong.

We don't currently support search criteria like “ou=servers". I will try locally for the sub OU.

thank you. I agree it would be more native for people to use the distinguished name path similar to how other tools work.