ou structure:
domain
company
servers
computers
users
users
I have gpos linked to domain ou. I have block inheritance set on Servers ou. More recently, I set block inheritance on Computers ou too. The GPOs linked to domain are still being applied to my servers.
Most notably, a gpo with user config, preferences, to add printers to wksts. This gpo has loopback enabled to allow us to assign printers for certain computers.
I also tried setting our terminal server computer object to deny read & apply for the printer mapping gpo. It still applies. I did replicate dc setting and gpupdate before checking. gpresult /z on the terminal server shows user settings for my regular domain user account. Shouldn't block inheritance still block this though? Enforced is not enabled on the gpo. When I click Servers ou in gpmc and goto gp inheritance, the gpos linked to domain do not show (except for enforced gpos).
maybe AD doesn't realize what ou the servers are in? or maybe its the loopback setting? What can I do to troubleshoot this.