As you know, when you make a GPO there are computer settings and user settings. You can only have your OUs setup in these two ways:
- All computers are in computer OUs and all users are in user OUs.
- Computers and users are mixed in OUs.
If users and computers are in different OUs, then there doesn't seem to be any reason that GPOs allow you to edit user settings AND computer settings because computer settings run before you logon and user settings run when you log on. Also, any changes you make in "computer settings" could be done in user settings anyway, right?
If users and computers are mixed in an OU, then what does a computer do with user settings? A computer doesn't login to a computer. And what if the user of the mixed OU logs into a computer that is not in it's mixed OU and the user's GPO has computer settings? Would that OU's user GPO computer settings run? If so, how? That other computer ran it's own OU's computer settings, right?