Removing Computers from an OU

My question is regarding OUs that are not nested. These are all separate OUs.

So, if I have 10 GPOs spread accross 10 different OUs for a Lab user. This user will get a combination of all the GPO settings?

No.

The user will get the GPO of its "home" OU ("home," meaning, the OU where the user object is in) and will inherit the user configuration GPO of the OU where the computer the user logs into is in

This is one of those things where you may have to visually see it to understand it.

if you want to know the combined policy applied to a user and computer, on the command prompt, type "gpresult." you'll see the policies applied to computer and user and at what time.

Hope that helps

I think I understood how it works all along, but the wording on here made me think you were saying something else.

To me, it sounded like you were saying that a user would get the user policies of any OU.

But, I think what you were saying is check the computer policies to see if they are what is applying.

If this is still ongoing then you may want to check your domain level group policy settings as there is a setting that prevents OU'S from blocking inheritance so basically even though you have the block inheritance setting ticked at the OU in question if the deny blocking inheritance is set at the domain level then the OU will have the domain level settings applied.

Just a word of advice, if you're not using the Group Policy Management Console already, I highly recommend that you download it from the Microsoft site. It makes group policy management a breeze! Link.

The original problem in the opening post, was it that you suspected computer objects were retaining settings configured in GPOs which were linked to former OUs where the object was situated?